npmpackage.info

Gathering detailed insights and metrics for @log4js-node/logstash-http

@log4js-node/logstash-http

Logstash HTTP appender for log4js-node

1.1.0

Apache-2.0

JavaScript

452,952 3.1

Installations

npm install @log4js-node/logstash-http

Score

73.4

Supply Chain

75.2

Quality

77.6

Maintenance

Vulnerability

100

License

Pull Requests

Open

4

Total

48

Closed

4

Merged

40

Issues

Open

1

Total

1

Closed

0

Releases

Unable to fetch releases

Developer

log4js-node

Developer Guide

BETA

Module System

CommonJS, UMD

Min. Node Version

>=6.0

Typescript Support

Yes

Node Version

10.15.0

NPM Version

6.4.1 Statistics

13 Stars

94 Commits

8 Forks

5 Watching

5 Branches

3 Contributors

Updated on 15 Aug 2024

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

452,952

Last day

9.1%

371

Compared to previous day

Last week

11.8%

2,865

Compared to previous week

Last month

4.9%

10,727

Compared to previous month

Last year

31.9%

134,999

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

axios debug

Dev Dependencies

@log4js-node/sandboxed-module codecov conventional-changelog eslint eslint-config-airbnb-base eslint-import-resolver-node eslint-plugin-import husky log4js nyc tap validate-commit-msg

Versions

logstash Appender (HTTP) for log4js-node

The logstash appenders for log4js send NDJSON formatted log events to logstash receivers. This appender uses HTTP to send the events (there is another logstash appender that uses UDP).

1npm install log4js @log4js-node/logstash-http

Configuration

type - @log4js-node/logstash-http
url - string - logFaces receiver servlet URL
application - string (optional) - used to identify your application's logs
logChannel - string (optional) - also used to identify your application's logs [but in a more specific way]
logType - string (optional) - used for the type field in the logstash data
timeout - integer (optional, defaults to 5000ms) - the timeout for the HTTP request.
agent - http.Agent | https.Agent (optional) - used to configure the requests being sent out if needed.

This appender will also pick up Logger context values from the events, and add them as p_ values in the logFaces event. See the example below for more details.

Example (default config)

1log4js.configure({
2  appenders: {
3    logstash: {
4      type: "@log4js-node/logstash-http",
5      url: "http://localhost:9200/_bulk",
6      application: "logstash-log4js",
7      logType: "application",
8      logChannel: "node",
9    },
10  },
11  categories: {
12    default: { appenders: ["logstash"], level: "info" },
13  },
14});
15
16const logger = log4js.getLogger();
17logger.addContext("requestId", "123");
18logger.info("some interesting log message");
19logger.error("something has gone wrong");

This example will result in two log events being sent to your localhost:9200. Both events will have a context.requestId property with a value of 123.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

2

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 2

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node.js.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/node.js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node.js.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/node.js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/npm-publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/npm-publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/npm-publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/log4js-node/logstashHTTP/npm-publish.yml/master?enable=pin
Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
Info: 3 out of 3 npmCommand dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

3.1

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More