Siva Kotipalli created FLUME-2779:
-------------------------------------

             Summary: MultiLine Deserializer for Spooling DIrectory Source
                 Key: FLUME-2779
                 URL: https://issues.apache.org/jira/browse/FLUME-2779
             Project: Flume
          Issue Type: Improvement
          Components: Sinks+Sources
    Affects Versions: 1.7
            Reporter: Siva Kotipalli
            Priority: Minor


1. Spool Directory source defaults to LINE, this has issue when multiline log 
events like stack traces and have request/responses.
2. Proposal to have log line start regex Key to aggregate all the log lines 
till the next regex key is found.
3. As there is aggregation needed based on startKey, maxLineLength is dropped 
on deserializer and included maxLogLineLength as alternative, this basically 
truncates the event based on the length and remaining part is never transferred 
to sink. 
4. logstartregexkey is introduced on Deserializer to include the start regex 
key.
5. Patch available with unit tests.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to