No commit activity in last 3 years
No release in over 3 years
Fluentd plugin to filter records with SQL-like WHERE statements
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
 Dependencies

Development

Runtime

 Project Readme

fluent-plugin-filter_where

Build Status

Fluentd plugin to filter records with SQL-like WHERE statements

Requirements

See .travis.yml

fluent-plugin-filter_where supports both v0.14 API and v0.12 API in one gem.

Installation

Use RubyGems:

gem install fluent-plugin-filter_where

Configuration

  • where

    The SQL-like WHERE statements. See SQL-like Syntax for more details.

Example

<filter foo.**>
  @type where
  where string_key = 'string' OR number_key >= 0.1
</filter>

SQL-like Syntax

Example:

where (string_key START_WITH 'str' AND number_key > 1.0) OR ("true_key" = true AND NOT (string_key REGEXP '^reg'))

Literals

Boolean Literal

true or TRUE or false or FALSE are considered as a boolean literal

Number Literal

Characters matching with a regular expression -?[0-9]+(\.[0-9]+)? is considered as a number literal

String Literal

Characters surrounded by ' such as 'foo' is considered as a string literal

Json Literal

Not supported yet

Identifier Literal

Characters matching with a regular expression [a-zA-Z_][a-zA-z0-9_]* such as foobar, and characters surrounded by " such as "foo-bar", "foo.bar", and "foo\"bar" are considred as an identifier literal, that is, fluentd's record key name.

Operators

Boolean Operator

  • =: Equal operator
  • !=, <>: Not equal operator

Number Operator (Long and Double)

  • =: Equal operator
  • !=, <>: Not equal operator
  • >: Greater than operator
  • >=: Greater than or equal operator
  • <=: Less than or equal operator
  • <: Less than operator

String Operator

  • =: Equal operator
  • !=, <>: Not equal operator
  • START_WITH
  • END_WITH
  • INCLUDE
  • REGEXP

Json Operator

Not supported yet

Negate Operator

  • NOT xxx

NULL Operator

  • IS NULL
  • IS NOT NULL

ChangeLog

See CHANGELOG.md for details.

Development

Run test:

$ bundle exec rake test

Release:

Modify version.rb and CHANGELOG.md, then

$ bundle exec rake release

Development of SQL-like Syntax

This plugin uses rexical for lexical scanner generator, and racc for parser generator.

If you modify parser.rex or parser.racc, you must compile them as:

$ bundle exec rake compile

The test task runs the compile task before running.

Comparisons

  • grep filter
    • grep filter plugin is bundled in fluentd >= 0.12.
    • I am the maintainor of the plugin, but I now feel where filter plugin is more useful.

Contributing

  1. Fork it
  2. Create your feature branch (git checkout -b my-new-feature)
  3. Commit your changes (git commit -am 'Add some feature')
  4. Push to the branch (git push origin my-new-feature)
  5. Create new Pull Request

Copyright

Copyright (c) 2017 - Naotoshi Seo. See LICENSE for details.