Examples with RawMessage org.graylog2.plugin.journal.RawMessage used on opensource projects

Example 66 with RawMessage

use of org.graylog2.plugin.journal.RawMessage in project graylog2-server by Graylog2.

the class CEFCodec method decodeCEF.

protected Message decodeCEF(@Nonnull RawMessage rawMessage, String s) {
    try {
        final MappedMessage cef = new MappedMessage(parser.parse(s, timezone.toTimeZone(), locale), useFullNames);
        // Build standard message.
        Message result = new Message(buildMessageSummary(cef), decideSource(cef, rawMessage), new DateTime(cef.timestamp()));
        // Add all extensions.
        result.addFields(cef.mappedExtensions());
        // Add standard CEF fields.
        result.addField("device_vendor", cef.deviceVendor());
        result.addField("device_product", cef.deviceProduct());
        result.addField("device_version", cef.deviceVersion());
        result.addField("event_class_id", cef.deviceEventClassId());
        result.addField("name", cef.name());
        result.addField("severity", cef.severity());
        return result;
    } catch (Exception e) {
        throw new RuntimeException("Could not decode CEF message.", e);
    }
}