Function NewUnixParserCtx

pkg/parser/unix_parser.go:37–68

(patternDir string, dataDir string)

}

func NewUnixParserCtx(patternDir string, dataDir string) (*UnixParserCtx, error) {
	r := UnixParserCtx{}
	r.Grok = grokky.NewBase()
	// RE2 is enabled by default on linux, but can be disabled with re2_disable_grok_support
	if runtime.GOOS == "linux" {
		r.Grok.UseRe2 = !fflag.Re2DisableGrokSupport.IsEnabled()
	} else {
		r.Grok.UseRe2 = fflag.Re2GrokSupport.IsEnabled()
	}

	files, err := os.ReadDir(patternDir)
	if err != nil {
		return nil, err
	}

	r.DataFolder = dataDir

	for _, file := range files {
		if strings.Contains(file.Name(), ".") || file.IsDir() {
			continue
		}

		if err := r.Grok.AddFromFile(filepath.Join(patternDir, file.Name())); err != nil {
			log.Errorf("failed to load pattern %s: %v", file.Name(), err)
			return nil, err
		}
	}

	log.Debugf("Loaded %d pattern files", len(files))

	return &r, nil
}

// Return new parsers
// nodes and povfwnodes are already initialized in parser.LoadStages