6. One Multi-Tool?
What would it be like to build a tool to
tackle this in the general case?
Wins:
•Fewer
processes to manage
•Increased
client / configuration
consistency
•Processing
shared across domains
13. Decoders
•Parse
event data to
populate a metadata
envelope for all event
types
•Extract
structure from
unstructured data...
•...
or just wrap a blob
•Sandbox-able
(Lua)
14. Router
Simple, efficient grammar for matching messages:
Type == "counter" && Payload == "1"
Type == "applog" && Logger == "marketplace"
Type == "alert" && (Severity==7 || Payload=="emergency")
Type == "myapp.metric" && Fields[name] =~ /.*.stat/
17. Sandboxes
Are Fun!
•
Dynamically added to running Heka w/ no
config changes, no restart
●
CPU cycles and RAM usage monitored
●
Misbehaving plugins are shut off