catch RegExp#match exceptions and log field/value information

ttyard · Jul 6, 2012 · ef3c990 · ef3c990
1 parent 7052973
commit ef3c990
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/lib/logstash/filters/grok.rb b/lib/logstash/filters/grok.rb
@@ -163,7 +163,15 @@ def filter(event)
 
       @logger.debug("Trying pattern", :pile => pile, :field => field )
       (event[field].is_a?(Array) ? event[field] : [event[field]]).each do |fieldvalue|
-        grok, match = pile.match(fieldvalue)
+        begin
+          grok, match = pile.match(fieldvalue)
+        rescue Exception => e
+          fieldvalue_bytes = []
+          fieldvalue.bytes.each { |b| fieldvalue_bytes << b }
+          @logger.warn("Grok regexp threw exception", :exception => e.message,
+                       :field => field, :grok_pile => pile,
+                       :fieldvalue_bytes => fieldvalue_bytes)
+        end
         next unless match
         matched = true
         done = true if @break_on_match