multiline

type MultiLine ¶

type MultiLine struct {
	LastTouched time.Time
	// contains filtered or unexported fields
}

MultiLine processor combining multiple line events into one multi-line event.

Lines to be combined are matched by some configurable predicate using regular expression.

The maximum number of lines to be returned is fully configurable. Even if limits are reached subsequent lines are matched, until event is fully finished.

func NewMultiLine(config *MultilineConfig) (MultiLine, error)

func (ml *MultiLine) Buffer(next *router.Message) *router.Message

func (ml *MultiLine) Expire(t time.Time, ttl time.Duration) *router.Message

func (ml *MultiLine) Flush() *router.Message

func (ml *MultiLine) PendingSize() int

func (ml *MultiLine) StartNewLine(next *router.Message) *router.Message

type MultilineConfig ¶

type MultilineConfig struct {
	Pattern   *regexp.Regexp `config:"pattern"     validate:"required"`
	GroupWith string         `config:"match"       validate:"required"`
	Negate    bool           `config:"negate"`
	Separator *string        `config:"separator"`
	MaxLines  int            `config:"max_lines"`
}