Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logback Encoder Support for HEC #290

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Logback Encoder Support for HEC #290

wants to merge 2 commits into from

Conversation

m-flak
Copy link

@m-flak m-flak commented Sep 20, 2024

Logback Encoder Support for HEC

Related Issues: #284

PR Summary

Encoders are now supported for the HEC appender, with layout now deprecated in the same fashion as the TCP appender. I have verified that JSON payloads are correctly sent using the popular logstash-logback-encoder with messageFormat set to json.
Acceptance and Stress Suites are all green.

PR Changes

  • HttpEventCollectorLogbackAppender accepts an encoder and automatically wraps a layout in the same manner as the tcp appender.
  • Testcontainers integration for the Acceptance and Stress Suites. Testcontainers will spin up the splunk docker image automatically prior to suite execution.
  • net.logstash.logback.encoder.LogstashEncoder with json message format utilized in the logback.xml to mimic real world usage within the test suite.
  • Updated the GitHub Action workflow, test.yml, to work with the Testcontainers approach.

PR Added Dependencies

m-flak and others added 2 commits September 20, 2024 11:25
* feat: logback encoder support for HEC

* feat: testcontainers in test suite

* feat: start container at suite level

* feat: test json message with logstash encoder
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant