Function parse_log_entry

packages/server/src/logs.rs:197–227

(line: &str)

}

fn parse_log_entry(line: &str) -> Option<LogEntry> {
    let trimmed = line.trim();
    if !trimmed.starts_with('{') {
        return None;
    }

    let payload: Value = serde_json::from_str(trimmed).ok()?;
    let process_path = payload
        .get("processImagePath")
        .and_then(Value::as_str)
        .unwrap_or("");
    let process = process_path
        .rsplit('/')
        .next()
        .filter(|value| !value.is_empty())
        .unwrap_or("unknown")
        .to_owned();

    Some(LogEntry {
        timestamp: string_field(&payload, "timestamp"),
        level: non_empty_string_field(&payload, "messageType")
            .unwrap_or_else(|| "Default".to_owned()),
        process,
        pid: payload.get("processID").cloned().unwrap_or(Value::Null),
        subsystem: string_field(&payload, "subsystem"),
        category: string_field(&payload, "category"),
        message: non_empty_string_field(&payload, "eventMessage")
            .or_else(|| non_empty_string_field(&payload, "formatString"))
            .unwrap_or_default(),
    })
}

fn string_field(payload: &Value, key: &str) -> String {
    non_empty_string_field(payload, key).unwrap_or_default()