#
# Cookbook:: irrigate-fluentd
# Recipe:: audit
#
# Copyright: The Orchard
#

include_recipe 'td-agent::default'

td_agent_source 'audit_source' do
  type 'tail'
  tag 'audit'
  parameters(
    path: node['audit']['log_file_path'],
    format: 'ltsv',
    delimiter: '\' \'',
    label_delimiter: '\'=\'',
    pos_file: node['audit']['pos_file_path']
  )
end

td_agent_filter 'audit_data_transformer' do
  type 'record_transformer'
  tag 'audit'
  parameters(
    enable_ruby: true,
    record: [{ data: '${[record["data"]].pack("H*")}' }]
  )
end

td_agent_filter 'audit_filter' do
  type 'grep'
  tag 'audit'
  parameters(
    regexp: [{ key: 'type', pattern: "(#{node['audit']['types'].join('|')})" }]
  )
end