Ejemplo n.º 1
0
 private final void setState(final State oldState, final State newState) {
   if (!m_state.compareAndSet(oldState, newState)) {
     LogUtils.debugf(
         this,
         "Attempted to move to state %s with state not %s (actual value %s)",
         newState,
         oldState,
         m_state.get());
   } else {
     if (LogUtils.isTraceEnabled(this)) {
       LogUtils.tracef(this, "Set state to %s\n", newState);
     }
   }
 }
  public SyslogMessage parse() throws SyslogParserException {
    final SyslogMessage syslogMessage = new SyslogMessage();

    String message = getText();

    int lbIdx = message.indexOf('<');
    int rbIdx = message.indexOf('>');

    if (lbIdx < 0 || rbIdx < 0 || lbIdx >= (rbIdx - 1)) {
      LogUtils.warnf(this, "Syslogd received an unparsable message!");
    }

    int priCode = 0;
    String priStr = message.substring(lbIdx + 1, rbIdx);

    try {
      priCode = Integer.parseInt(priStr);
    } catch (final NumberFormatException ex) {
      LogUtils.debugf(this, "ERROR Bad priority code '%s'", priStr);
    }

    LogUtils.tracef(this, "priority code = %d", priCode);

    syslogMessage.setFacility(SyslogFacility.getFacilityForCode(priCode));
    syslogMessage.setSeverity(SyslogSeverity.getSeverityForCode(priCode));

    message = message.substring(rbIdx + 1, message.length());

    final Matcher idMatcher = m_messageIdPattern.matcher(message);
    if (idMatcher.find()) {
      final String messageId = idMatcher.group(2);
      LogUtils.tracef(this, "found message ID '%s'", messageId);
      syslogMessage.setMessageID(messageId);
      message = message.substring(idMatcher.group(1).length() - 1);
    }

    LogUtils.tracef(this, "message = %s", message);

    Matcher oldDateMatcher = m_oldDatePattern.matcher(message);
    if (!oldDateMatcher.find()) {
      oldDateMatcher = null;
    }
    LogUtils.tracef(this, "stdMsg = %s", Boolean.toString(oldDateMatcher != null));

    if (!this.find()) {
      if (traceEnabled()) {
        LogUtils.tracef(
            this, "Lenient Syslog pattern '%s' did not match '%s'", getPattern(), getText());
      }
      return null;
    }

    String timestamp;

    if (oldDateMatcher == null) {
      final Matcher stampMatcher = m_datePattern.matcher(message);
      if (stampMatcher.find()) {
        timestamp = stampMatcher.group(2);
        LogUtils.tracef(this, "found timestamp '%s'", timestamp);
        //                message = message.substring(stampMatcher.group(1).length());
      } else {
        try {
          timestamp = SyslogTimeStamp.getInstance().format(new Date());
        } catch (final IllegalArgumentException ex) {
          LogUtils.debugf(this, "ERROR INTERNAL DATE ERROR!");
          timestamp = "";
        }
      }
    } else {
      timestamp = oldDateMatcher.group(1);
      message = oldDateMatcher.replaceFirst("");
    }

    LogUtils.tracef(this, "timestamp = %s", timestamp);
    syslogMessage.setDate(parseDate(timestamp));

    // These 2 debugs will aid in analyzing the regexes as syslog seems
    // to differ a lot depending on implementation or message structure.

    if (LogUtils.isTraceEnabled(this)) {
      LogUtils.tracef(this, "message = %s", message);
      LogUtils.tracef(this, "pattern = %s", m_forwardingPattern);
      LogUtils.tracef(this, "host group = %d", m_matchingGroupHost);
      LogUtils.tracef(this, "message group = %d", m_matchingGroupMessage);
    }

    // We will also here find out if, the host needs to
    // be replaced, the message matched to a UEI, and
    // last if we need to actually hide the message.
    // this being potentially helpful in avoiding showing
    // operator a password or other data that should be
    // confidential.

    final Pattern pattern = m_forwardingPattern;
    final Matcher m = pattern.matcher(message);

    /*
     * We matched on a regexp for host/message pair.
     * This can be a forwarded message as in BSD Style
     * or syslog-ng.
     */

    if (m.matches()) {

      final String matchedMessage = m.group(m_matchingGroupMessage);
      syslogMessage.setMatchedMessage(matchedMessage);

      if (LogUtils.isTraceEnabled(this)) {
        LogUtils.tracef(
            this, "Syslog message '%s' matched regexp '%s'", message, m_forwardingPattern);
        LogUtils.tracef(this, "Found host '%s'", m.group(m_matchingGroupHost));
        LogUtils.tracef(this, "Found message '%s'", matchedMessage);
      }

      syslogMessage.setHostName(m.group(m_matchingGroupHost));

      message = matchedMessage;
    } else {
      LogUtils.debugf(this, "Regexp not matched: %s", message);
      return null;
    }

    lbIdx = message.indexOf('[');
    rbIdx = message.indexOf(']');
    final int colonIdx = message.indexOf(':');
    final int spaceIdx = message.indexOf(' ');

    int processId = 0;
    String processName = "";
    String processIdStr = "";

    if (lbIdx < (rbIdx - 1) && colonIdx == (rbIdx + 1) && spaceIdx == (colonIdx + 1)) {
      processName = message.substring(0, lbIdx);
      processIdStr = message.substring(lbIdx + 1, rbIdx);
      message = message.substring(colonIdx + 2);

      try {
        processId = Integer.parseInt(processIdStr);
      } catch (final NumberFormatException ex) {
        LogUtils.debugf(this, "Bad process id '%s'", processIdStr);
        processId = 0;
      }
    } else if (lbIdx < 0 && rbIdx < 0 && colonIdx > 0 && spaceIdx == (colonIdx + 1)) {
      processName = message.substring(0, colonIdx);
      message = message.substring(colonIdx + 2);
    }

    syslogMessage.setProcessId(processId);
    syslogMessage.setProcessName(processName);
    syslogMessage.setMessage(message.trim());

    return syslogMessage;
  }