A logstash filter to parse C# stack traces and exception messages.
Installation
As this plugin has been shared on RubyGems with the name logstash-filter-csharp you can install it using the following command from your Logstash installation path:
bin/logstash-plugin install logstash-filter-csharpUsage
Here is an example configuration that reads fields from a JSON-formatted log
and expects stack traces to be in the field stackTrace and exceptions to be
in the field `exception. It parses these into fields which are in this example
written to metadata that is then consumed by
logstash-output-sentry
filter {
grok {
match => { "message" => "\[%{LOGLEVEL:log_type}\] %{TIMESTAMP_ISO8601:timestamp_iso} :: %{GREEDYDATA:json_message}" }
}
json {
source => "json_message"
}
if [stackTrace] {
csharp {
type => "stacktrace"
source => [stackTrace]
target => "[@metadata][sentry][stacktrace]"
stackframe_path_prefix => ".*\\(?=prod\\)"
most_recent_call_last => true
}
}
if [exception] {
csharp {
type => "exception"
source => [exception]
target => "[@metadata][sentry][exception]"
most_recent_call_last => true
}
}
Running Tests
The tests live in spec/. To run them, do something like
export GEM_HOME=`mktemp -d`
jruby -S gem install bundler
jruby -S bundle install
jruby -S bundle exec rspec
Releasing a new Version
We use rever. To create a new release make sure you are on the master branch, identical to origin/master without pending changes and run
rever <VERSION>