kelora 1.5.0

A command-line log analysis tool with embedded Rhai scripting
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

// Reusable helper functions for log analysis

// Check if event is a problem (error or slow)
fn is_problem(event) {
    let is_error = event.level == "ERROR" || event.level == "CRITICAL";
    // Check for slow requests: response_time in seconds or duration_ms in milliseconds
    let is_slow = (event.has("response_time") && event.response_time > 1.0) ||
                  (event.has("duration_ms") && event.duration_ms > 1000) ||
                  (event.has("latency_ms") && event.latency_ms > 1000);
    is_error || is_slow
}

// Classify severity based on level and metrics
fn classify_severity(level, value) {
    if level == "CRITICAL" || level == "ERROR" {
        "high"
    } else if level == "WARN" || value > 1000 {
        "medium"
    } else {
        "low"
    }
}

// Extract domain from URL or email
fn extract_domain(text) {
    if text.contains("@") {
        // Email format
        let parts = text.split("@");
        if parts.len() > 1 {
            parts[1]
        } else {
            "unknown"
        }
    } else if text.contains("://") {
        // URL format
        let after_protocol = text.split("://")[1];
        let domain_part = after_protocol.split("/")[0];
        let without_port = domain_part.split(":")[0];
        without_port
    } else {
        text
    }
}

// Mask sensitive data
fn mask_sensitive(value) {
    if value.len() <= 4 {
        "***"
    } else {
        value.sub_string(0, 2) + "***" + value.sub_string(value.len() - 2, 2)
    }
}