newedge/liminix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

send log timestamp parse errors to victorialogs

Browse Source
This commit is contained in:
Daniel Barlow
2025-10-08 19:43:57 +01:00
parent 70786712b3
commit 29fbb5461d
1 changed files with 16 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
pkgs/logshippers/victorialogsend.fnl
View File

@@ -60,18 +60,25 @@ Host: %s\
(expect= (format-timestamp-rfc3339 "@4000000068e2f0d3257dc09b" 3) (expect= (format-timestamp-rfc3339 "@4000000068e2f0d3257dc09b" 3)
"2025-10-05T22:26:54.628Z")) "2025-10-05T22:26:54.628Z"))
(fn process-line [line] (fn process-line [line]
(let [(timestamp hostname service msg) (string.match line "(@%x+) (%g+) (%g+) (.+)$")] (let [(timestamp hostname service msg) (string.match line "(@%x+) (%g+) (%g+) (.+)$")]
(-> (->
(string.format (if timestamp
"{%q:%q,%q:%q,%q:%q,%q:%q}\n" (string.format
:_time (format-timestamp-rfc3339 timestamp 3) "{%q:%q,%q:%q,%q:%q,%q:%q}\n"
:service service :_time (format-timestamp-rfc3339 timestamp 3)
:_msg msg :service service
:host hostname) :_msg msg
chunk))) :host hostname)
(string.format
"{%q:%q,%q:%q,%q:%q,%q:%q}\n"
:_time (os.date "!%FT%TZ")
:service "ERROR"
:_msg (string.format "can't parse log %q" msg)
:host hostname))
chunk)
))
(fn writefd [fd body] (fn writefd [fd body]
(case (ll.write fd body) (case (ll.write fd body)
(bytes) (when (< bytes (# body)) (writefd fd (string.sub body bytes))) (bytes) (when (< bytes (# body)) (writefd fd (string.sub body bytes)))