Logstash - transport and process your logs, events, or other data
This report summarizes scanner evidence for elastic/logstash, a Java project with 14,964 GitHub stars. SynthScan examined 223,946 lines of code across 1839 source files, recording 756 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 5.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 683 finding(s).
Are imports declared and package/API names verified? 56 finding(s).
Are wrappers, guards, and repeated structures necessary? 97 finding(s).
Which changes need focused human review? 756 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 756 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .fossa.yml | 41 | # type: pip | COMMENT |
| LOW | versions.yml | 21 | # jruby-runtime-override, if specified, will override the jruby version installed in vendor/jruby | COMMENT |
| LOW | tools/paquet/spec/spec_helper.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/spec/paquet/shell_ui_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/spec/paquet/dependency_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/spec/paquet/utils_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/spec/paquet/gem_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/spec/integration/paquet_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/lib/paquet.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/lib/paquet/shell_ui.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/lib/paquet/gem.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/lib/paquet/dependency.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/lib/paquet/utils.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/lib/paquet/version.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/paquet/lib/paquet/rspec/tasks.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/bin/extract_doc.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/spec/spec_helper.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/spec/logstash/docgen/util_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …-docgen/spec/logstash/docgen/dependency_lookup_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …gstash-docgen/spec/logstash/docgen/task_runner_spec.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/spec/support/helpers.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/lib/logstash/docgen.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …stash-docgen/lib/logstash/docgen/logstash_generator.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …ogstash-docgen/lib/logstash/docgen/github_generator.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/lib/logstash/docgen/parser.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …ols/logstash-docgen/lib/logstash/docgen/task_runner.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/lib/logstash/docgen/util.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/lib/logstash/docgen/plugin_doc.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …s/logstash-docgen/lib/logstash/docgen/static_parser.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/lib/logstash/docgen/version.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …logstash-docgen/lib/logstash/docgen/asciidoc_format.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/lib/logstash/docgen/index.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …gstash-docgen/lib/logstash/docgen/dependency_lookup.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/lib/logstash/docgen/runner.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | …/logstash-docgen/lib/logstash/docgen/dynamic_parser.rb | 1 | # Licensed to Elasticsearch B.V. under one or more contributor | COMMENT |
| LOW | tools/logstash-docgen/templates/plugin-doc.css | 21 | margin-top: 2em; | COMMENT |
| LOW | tools/release/generate_release_notes.rb | 1 | #!/usr/bin/env ruby | COMMENT |
| LOW | tools/release/bump_plugin_versions.rb | 1 | #!/usr/bin/env ruby | COMMENT |
| LOW | tools/release/generate_release_notes_md.rb | 1 | #!/usr/bin/env ruby | COMMENT |
| LOW | bin/logstash.lib.sh | 1 | # This script is used to initialize a number of env variables and setup the | COMMENT |
| LOW | config/pipelines.yml | 1 | # List of pipelines to be loaded by Logstash | COMMENT |
| LOW | config/pipelines.yml | 21 | # | COMMENT |
| LOW | config/pipelines.yml | 41 | # # to over 50,000 events (1000x50=50,000) will be sent to outputs 50 events at a time instead of a | COMMENT |
| LOW | config/pipelines.yml | 61 | # | COMMENT |
| LOW | config/pipelines.yml | 81 | # | COMMENT |
| LOW | config/pipelines.yml | 101 | COMMENT | |
| LOW | config/logstash.yml | 1 | # Settings file in YAML | COMMENT |
| LOW | config/logstash.yml | 21 | # If omitted the node name will default to the machine's host name | COMMENT |
| LOW | config/logstash.yml | 41 | # pipeline.workers: 2 | COMMENT |
| LOW | config/logstash.yml | 61 | # | COMMENT |
| LOW | config/logstash.yml | 81 | # "false" disables any extra processing necessary for preserving ordering. | COMMENT |
| LOW | config/logstash.yml | 101 | # Where to fetch the pipeline configuration for the main pipeline | COMMENT |
| LOW | config/logstash.yml | 121 | # Setting the interval this way is not recommended and might change in later versions. | COMMENT |
| LOW | config/logstash.yml | 141 | # | COMMENT |
| LOW | config/logstash.yml | 161 | # host's loopback interface, ensuring that it is not accessible to the rest of | COMMENT |
| LOW | config/logstash.yml | 181 | # | COMMENT |
| LOW | config/logstash.yml | 201 | # resolves to the value stored in the keystore's `HTTP_PASS` variable if present | COMMENT |
| LOW | config/logstash.yml | 221 | # | COMMENT |
| LOW | config/logstash.yml | 241 | # If you would like more unacked events to be buffered in Logstash, you can increase the | COMMENT |
| LOW | config/logstash.yml | 261 | # | COMMENT |
| 488 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | logstash-core/spec/logstash/pipeline_dlq_commit_spec.rb | 98 | dlq_reader = org.logstash.common.io.DeadLetterQueueReader.new(dlq_path) | CODE |
| CRITICAL | logstash-core/spec/logstash/java_pipeline_spec.rb | 455 | org.logstash.config.ir.PipelineConfig.new( | CODE |
| CRITICAL | logstash-core/spec/logstash/java_pipeline_spec.rb | 515 | dlq_reader = org.logstash.common.io.DeadLetterQueueReader.new(dlq_path) | CODE |
| CRITICAL | logstash-core/spec/logstash/java_pipeline_spec.rb | 529 | org.logstash.config.ir.PipelineConfig.new( | CODE |
| CRITICAL | logstash-core/spec/logstash/java_pipeline_spec.rb | 1838 | collected_metric = subject.metric.collector.snapshot_metric.metric_store.get_with_path("stats/pipelines") | CODE |
| CRITICAL | logstash-core/spec/logstash/java_pipeline_spec.rb | 1848 | collected_metric = subject.metric.collector.snapshot_metric.metric_store.get_with_path("stats/pipelines") | CODE |
| CRITICAL | …ash-core/spec/logstash/instrument/metric_store_spec.rb | 23 | let(:counter) { org.logstash.instrument.metrics.counter.LongCounter.new(key.to_s) } | CODE |
| CRITICAL | …ash-core/spec/logstash/instrument/metric_store_spec.rb | 36 | let(:new_counter) { org.logstash.instrument.metrics.counter.LongCounter.new(key.to_s) } | CODE |
| CRITICAL | …ash-core/spec/logstash/instrument/metric_store_spec.rb | 66 | metric = subject.fetch_or_store(namespaces, metric_key, org.logstash.instrument.metrics.counter.LongCounter.new( | CODE |
| CRITICAL | …ash-core/spec/logstash/instrument/metric_store_spec.rb | 273 | metric = subject.fetch_or_store(namespaces, metric_key, org.logstash.instrument.metrics.counter.LongCounter.new( | CODE |
| CRITICAL | …gstash-core/spec/logstash/config/source_loader_spec.rb | 24 | org.logstash.config.ir.PipelineConfig.new(source, id.to_sym, [config_part], LogStash::SETTINGS) | CODE |
| CRITICAL | …logstash/plugins/builtin/pipeline_input_output_spec.rb | 112 | event_metrics = input.metric.collector.snapshot_metric.metric_store.get_with_path( | CODE |
| CRITICAL | …logstash/plugins/builtin/pipeline_input_output_spec.rb | 118 | event_metrics = output.metric.collector.snapshot_metric.metric_store.get_with_path( | CODE |
| CRITICAL | …logstash/plugins/builtin/pipeline_input_output_spec.rb | 195 | event_metrics = output.metric.collector.snapshot_metric.metric_store.get_with_path( | CODE |
| CRITICAL | logstash-core/spec/support/helpers.rb | 107 | org.logstash.config.ir.PipelineConfig.new(self.class, pipeline_id.to_sym, config_parts, merged_pipeline_settings) | CODE |
| CRITICAL | logstash-core/spec/support/helpers.rb | 136 | org.logstash.config.ir.PipelineConfig.new(LogStash::Config::Source::Local, pipeline_id.to_sym, [config_part], settings | CODE |
| CRITICAL | logstash-core/spec/support/pipeline/pipeline_helpers.rb | 79 | org.logstash.config.ir.PipelineConfig.new( | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/java_pipeline.rb | 71 | @flushing = java.util.concurrent.atomic.AtomicBoolean.new(false) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/java_pipeline.rb | 72 | @flushRequested = java.util.concurrent.atomic.AtomicBoolean.new(false) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/java_pipeline.rb | 73 | @shutdownRequested = java.util.concurrent.atomic.AtomicBoolean.new(false) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/agent.rb | 677 | org.logstash.instrument.metrics.counter.LongCounter.fromRubyBase(namespace, key) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/agent.rb | 682 | org.logstash.instrument.metrics.timer.TimerMetric.fromRubyBase(namespace, key) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/agent.rb | 687 | org.logstash.instrument.metrics.FlowMetric.create(name, numerator_metric, denominator_metric) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/instrument/metric_type.rb | 28 | when :counter then return org.logstash.instrument.metrics.counter.LongCounter.new(key.to_s) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/instrument/metric_type.rb | 29 | when :gauge then return org.logstash.instrument.metrics.gauge.LazyDelegatingGauge.new(key.to_s) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/instrument/metric_type.rb | 30 | when :uptime then return org.logstash.instrument.metrics.UptimeMetric.new(key.to_s) | CODE |
| CRITICAL | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 79 | @otel_service = org.logstash.instrument.metrics.otel.OtelMetricsService.new(config) | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/config/lir_serializer.rb | 125 | edges_with_separators_removed << edge(org.logstash.config.ir.graph.BooleanEdge.new(e.edgeType, e.from, out | CODE |
| CRITICAL⚡ | logstash-core/lib/logstash/config/lir_serializer.rb | 127 | edges_with_separators_removed << edge(org.logstash.config.ir.graph.PlainEdge.factory.make(e.from, outgoing | CODE |
| CRITICAL | logstash-core/lib/logstash/config/source/local.rb | 219 | [org.logstash.config.ir.PipelineConfig.new(self.class, @settings.get("pipeline.id").to_sym, config_parts, @setting | CODE |
| CRITICAL | …sh-core/lib/logstash/plugins/builtin/pipeline/input.rb | 31 | @running = java.util.concurrent.atomic.AtomicBoolean.new(false) | CODE |
| CRITICAL | …/java/org/logstash/config/ir/CompiledPipelineTest.java | 544 | final RubyObject configNameDouble = org.logstash.config.ir.PluginConfigNameMethodDouble.create(name); | CODE |
| CRITICAL | …/java/org/logstash/config/ir/CompiledPipelineTest.java | 737 | final RubyObject configNameDouble = org.logstash.config.ir.PluginConfigNameMethodDouble.create(name); | CODE |
| CRITICAL | …java/org/logstash/log/PipelineRoutingAppenderTest.java | 46 | org.apache.logging.log4j.ThreadContext.put("pipeline.id", pipelineId); | CODE |
| CRITICAL | …rg/logstash/config/ir/compiler/OutputDelegatorExt.java | 110 | org.apache.logging.log4j.ThreadContext.put("plugin.id", pluginId.toString()); | CODE |
| CRITICAL | …rg/logstash/config/ir/compiler/OutputDelegatorExt.java | 115 | org.apache.logging.log4j.ThreadContext.remove("plugin.id"); | CODE |
| CRITICAL | …rg/logstash/config/ir/compiler/FilterDelegatorExt.java | 131 | org.apache.logging.log4j.ThreadContext.put("plugin.id", pluginId.toString()); | CODE |
| CRITICAL | …rg/logstash/config/ir/compiler/FilterDelegatorExt.java | 136 | org.apache.logging.log4j.ThreadContext.remove("plugin.id"); | CODE |
| CRITICAL | …logstash/config/ir/compiler/JavaInputDelegatorExt.java | 84 | org.apache.logging.log4j.ThreadContext.put("pipeline.id", pipeline.pipelineId().toString()); | CODE |
| CRITICAL | …logstash/config/ir/compiler/JavaInputDelegatorExt.java | 85 | org.apache.logging.log4j.ThreadContext.put("plugin.id", this.getId(context).toString()); | CODE |
| CRITICAL | …in/java/org/logstash/plugins/NamespacedMetricImpl.java | 98 | USER_METRIC userMetric = org.logstash.instrument.metrics.UserMetric.fromRubyBase(metrics, threadContext.runtime. | CODE |
| CRITICAL | …gstash/plugins/factory/ExecutionContextFactoryExt.java | 70 | if (org.logstash.common.io.DeadLetterQueueWriter.class.isAssignableFrom(innerWriter.getJavaClass())) { | CODE |
| CRITICAL | docs/static/spec/openapi/logstash-api.yaml | 1648 | - "java.util.concurrent.locks.LockSupport.park(LockSupport.java:175)" | CODE |
| CRITICAL | docs/static/spec/openapi/logstash-api.yaml | 1649 | - "java.util.concurrent.locks.AbstractQueuedSynchronizer.parkAndCheckInterrupt(AbstractQueue | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/logstash-docgen/lib/logstash/docgen/static_parser.rb | 66 | def parse_new_class_description(class_definition) | CODE |
| LOW | ci/test_plugins.rb | 250 | def select_by_tiers_and_kinds(tiers, kinds) | CODE |
| LOW | logstash-core/spec/logstash/java_pipeline_spec.rb | 1803 | def build_pipeline_string_config(dummyinput_config) | CODE |
| LOW | logstash-core/spec/logstash/event_dispatcher_spec.rb | 30 | def method_exists_with_arguments(argument1, argument2, argument3) | CODE |
| LOW | logstash-core/spec/logstash/event_dispatcher_spec.rb | 43 | def method_exists_with_arguments(argument1, argument2, argument3) | CODE |
| LOW | …gstash-core/spec/logstash/config/source_loader_spec.rb | 22 | def temporary_pipeline_config(id, source, reader = "random_reader") | CODE |
| LOW | logstash-core/spec/support/helpers.rb | 120 | def mock_java_pipeline_from_string(config_string, settings = LogStash::SETTINGS, metric = nil) | CODE |
| LOW | logstash-core/lib/logstash/java_pipeline.rb | 719 | def wait_input_threads_termination(timeout_seconds, &block) | CODE |
| LOW | logstash-core/lib/logstash/agent.rb | 399 | def resolve_actions_and_converge_state(pipeline_configs) | CODE |
| LOW | logstash-core/lib/logstash/agent.rb | 411 | def converge_state_with_resolved_actions(pipeline_actions) | CODE |
| LOW⚡ | logstash-core/lib/logstash/agent.rb | 696 | def initialize_pipeline_metrics(action) | CODE |
| LOW⚡ | logstash-core/lib/logstash/agent.rb | 706 | def update_successful_reload_metrics(action, action_result) | CODE |
| LOW⚡ | logstash-core/lib/logstash/agent.rb | 715 | def initialize_geoip_database_metrics(metric) | CODE |
| LOW | logstash-core/lib/logstash/instrument/metric_store.rb | 311 | def fetch_or_store_namespaces(namespaces_path) | CODE |
| LOW | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 331 | def register_pipeline_gauges_for(pipeline_id) | CODE |
| LOW | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 391 | def register_pipeline_counters_for(pipeline_id) | CODE |
| LOW | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 436 | def register_observable_counter(name, description, unit, attributes = Attributes.empty, &block) | CODE |
| LOW | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 461 | def get_pipeline_metric_value(pipeline_id, *path) | CODE |
| LOW | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 475 | def create_pipeline_attributes(pipeline_id) | CODE |
| LOW | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 491 | def register_plugin_metrics_for(pipeline_id) | CODE |
| LOW | …h-core/lib/logstash/instrument/periodic_poller/otel.rb | 519 | def register_plugin_counters_for(pipeline_id, plugin_type, plugin_id) | CODE |
| LOW | …sh-core/lib/logstash/instrument/periodic_poller/jvm.rb | 186 | def aggregate_information_for(collection) | CODE |
| LOW⚡ | logstash-core/lib/logstash/config/lir_serializer.rb | 119 | def remove_separators_from_edges(edges) | CODE |
| LOW | logstash-core/lib/logstash/config/mixin.rb | 269 | def validate_check_invalid_parameter_names(params) | CODE |
| LOW | logstash-core/lib/logstash/config/mixin.rb | 291 | def validate_check_required_parameter(config_key, config_opts, k, v) | CODE |
| LOW | logstash-core/lib/logstash/config/mixin.rb | 299 | def validate_check_required_parameter_names(params) | CODE |
| LOW | logstash-core/lib/logstash/config/mixin.rb | 341 | def validate_check_parameter_values(params) | CODE |
| LOW | logstash-core/lib/logstash/config/source/multi_local.rb | 105 | def detect_duplicate_pipelines(pipelines) | CODE |
| LOW | logstash-core/lib/logstash/patches/clamp.rb | 86 | def define_deprecated_accessors_for(option, opts, &block) | CODE |
| LOW | logstash-core/lib/logstash/patches/clamp.rb | 90 | def define_deprecated_writer_for(option, opts, &block) | CODE |
| LOW | logstash-core/lib/logstash/api/commands/node.rb | 109 | def decorate_with_cluster_uuids(vertex) | CODE |
| LOW | logstash-core/lib/logstash/api/commands/stats.rb | 234 | def reshape_histogram_percentiles_for_window(target_field, histogram_metric, window, result) | CODE |
| LOW | logstash-core/lib/logstash/api/modules/root.rb | 80 | def wait_for_status_and_respond(target_status, timeout) | CODE |
| LOW | …ec/unit/plugin_manager/offline_plugin_packager_spec.rb | 27 | def retrieve_packaged_plugins(path) | CODE |
| LOW | …ec/unit/plugin_manager/offline_plugin_packager_spec.rb | 31 | def retrieve_dependencies_gems(path) | CODE |
| LOW | qa/docker/spec/spec_helper.rb | 73 | def license_agreement_for_flavor(flavor) | CODE |
| LOW | qa/integration/framework/helpers.rb | 90 | def extract_gem_data_from_file(gem_file) | CODE |
| LOW | qa/integration/specs/spec_helper.rb | 18 | def es_allow_wildcard_deletes(es_client) | CODE |
| LOW | qa/integration/specs/pipeline_log_spec.rb | 188 | def wait_logstash_process_terminate(service) | CODE |
| LOW | qa/integration/specs/tls_hot_reload_spec.rb | 61 | def wait_for_pipeline_reloads(logstash_service, *pipeline_ids, retries: 15, &block) | CODE |
| LOW⚡ | qa/integration/specs/tls_hot_reload_spec.rb | 86 | def wait_for_pipeline_reload_state(logstash_service, *pipeline_ids, successes:, failures:, retries: 15) | CODE |
| LOW⚡ | qa/integration/specs/tls_hot_reload_spec.rb | 93 | def wait_for_pipeline_reload_failures(logstash_service, *pipeline_ids, failures:, retries: 15) | CODE |
| LOW⚡ | qa/integration/specs/tls_hot_reload_spec.rb | 99 | def assert_pipeline_reload_state_stable(logstash_service, *pipeline_ids, successes:, failures:, retries: 5) | CODE |
| LOW | qa/integration/specs/direct_heap_allocator_flag_spec.rb | 108 | def find_last_mem_dump_log_line(log_file) | CODE |
| LOW | qa/integration/services/logstash_service.rb | 142 | def start_background_with_config_settings(config, settings_file) | CODE |
| LOW | qa/acceptance/helpers.rb | 22 | def logstash_download_metadata(version, arch, artifact_type) | CODE |
| LOW | qa/acceptance/helpers.rb | 27 | def fetch_latest_logstash_release_version(branch) | CODE |
| LOW | qa/acceptance/spec/spec_helper.rb | 23 | def with_running_logstash_service(logstash) | CODE |
| LOW | …lure_injector/lib/logstash/filters/failure_injector.rb | 74 | def degrade_or_crash_if_required(phase) | CODE |
| LOW | …lure_injector/lib/logstash/outputs/failure_injector.rb | 74 | def degrade_or_crash_if_required(phase) | CODE |
| LOW | qa/rspec/commands/base.rb | 153 | def jdk_architecture_extension(skip_jdk_infix) | CODE |
| LOW | .buildkite/scripts/jdk-matrix-tests/generate-steps.py | 213 | def succeeded_step_annotation(self, step_name_human) -> str: | STRING |
| LOW | .buildkite/scripts/jdk-matrix-tests/generate-steps.py | 281 | def pq_integration_test_parts(self, parts) -> list[partial[JobRetValues]]: | STRING |
| LOW | .buildkite/scripts/health-report-tests/bootstrap.py | 45 | def __resolve_latest_stack_version_for(self, major_version: str) -> str: | STRING |
| LOW | …ildkite/scripts/snyk/artifact-scan/extract_versions.rb | 312 | def infer_version_from_gem_path(jar_path) | CODE |
| LOW | …ildkite/scripts/snyk/artifact-scan/extract_versions.rb | 340 | def infer_maven_coords_from_path(jar_path) | CODE |
| LOW | .buildkite/scripts/dra/generatesteps.py | 8 | def to_bk_key_friendly_string(key): | CODE |
| LOW | .buildkite/scripts/dra/generatesteps.py | 107 | def ship_observability_sre_image_steps(branch, workflow_type): | STRING |
| LOW | lib/bootstrap/bundler.rb | 84 | def restart_with_locked_bundler_if_needed(*) | CODE |
| LOW | lib/bootstrap/bundler.rb | 195 | def execute_bundler_with_retry(options) | CODE |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …stash-docgen/lib/logstash/docgen/logstash_generator.rb | 27 | # This class is used to generate the documentation inside a working logstash | COMMENT |
| MEDIUM | …stash-docgen/lib/logstash/docgen/logstash_generator.rb | 31 | # This class is invoked inside logstash with a rake task named: `docs:generate-plugins` | COMMENT |
| MEDIUM | tools/logstash-docgen/lib/logstash/docgen/parser.rb | 74 | # This class is mostly a data class that represent what will be exposed in the ERB files | COMMENT |
| MEDIUM | tools/logstash-docgen/lib/logstash/docgen/parser.rb | 172 | # This class is the main point of entry to the parsing of the plugin ruby file, | COMMENT |
| MEDIUM | …s/logstash-docgen/lib/logstash/docgen/static_parser.rb | 19 | # This class is parsing static content of the main class and | COMMENT |
| MEDIUM | docker/data/logstash/config/pipelines.yml | 1 | # This file is where you define your pipelines. You can define multiple. | COMMENT |
| MEDIUM | …spec/logstash/persisted_queue_config_validator_spec.rb | 87 | # Create a pipeline config double that matches what the class expects | COMMENT |
| MEDIUM | …core/spec/logstash/settings/writable_directory_spec.rb | 42 | # Create a new WritableDirectorySetting setting with no default value strict | COMMENT |
| MEDIUM | …core/spec/logstash/settings/writable_directory_spec.rb | 113 | # Create a path with at least one subdirectory we can try to fiddle with permissions | COMMENT |
| MEDIUM | logstash-core/spec/support/shared_examples.rb | 18 | # Define the common operation that both the `NullMetric` class and the Namespaced class should answer. | COMMENT |
| MEDIUM | logstash-core/lib/logstash/agent.rb | 106 | # Create the collectors and configured it with the library | COMMENT |
| MEDIUM | …core/lib/logstash/instrument/namespaced_null_metric.rb | 18 | # This file is kept for backwards compatibility with plugins that include it directly. | COMMENT |
| MEDIUM | …tash-core/lib/logstash/instrument/namespaced_metric.rb | 18 | # This file is kept for backwards compatibility with plugins that include it. | COMMENT |
| MEDIUM | logstash-core/lib/logstash/instrument/metric.rb | 18 | # This file is kept for backwards compatibility with plugins that include it. | COMMENT |
| MEDIUM | logstash-core/lib/logstash/config/mixin.rb | 28 | # This module is meant as a mixin to classes wishing to be configurable from | COMMENT |
| MEDIUM | logstash-core/lib/logstash/config/mixin.rb | 56 | # This method is called when someone does 'include LogStash::Config' | COMMENT |
| MEDIUM | logstash-core/lib/logstash/config/mixin.rb | 192 | # Define a new configuration setting | COMMENT |
| MEDIUM | logstash-core/lib/logstash/config/mixin.rb | 246 | # This method is invoked whenever someone subclasses us, like: | COMMENT |
| MEDIUM | logstash-core/lib/logstash/patches/clamp.rb | 131 | # Create a subclass of Clamp::Command that enforces the use of | COMMENT |
| MEDIUM | qa/integration/framework/cert_helpers.rb | 59 | # Create a PKCS12 truststore containing one or more CA certificates. | COMMENT |
| MEDIUM | .buildkite/scripts/common/vm-agent-multi-jdk.sh | 4 | # This file contains prerequisite bootstrap invocations | COMMENT |
| MEDIUM | .buildkite/scripts/common/container-agent.sh | 4 | # This file contains prerequisite bootstrap invocations | COMMENT |
| MEDIUM | .buildkite/scripts/common/vm-agent.sh | 4 | # This file contains prerequisite bootstrap invocations | COMMENT |
| MEDIUM | …ldkite/scripts/dra/build-and-push-observability-sre.sh | 36 | # Create the full tag with SHA and architecture | COMMENT |
| MEDIUM | lib/pluginmanager/bundler/logstash_injector.rb | 67 | # This class is pretty similar to what bundler's injector class is doing | COMMENT |
| MEDIUM | x-pack/lib/license_checker/license_manager.rb | 72 | # Create a daemon thread for the license checker to stop this thread from keeping logstash running in the | COMMENT |
| MEDIUM | pkg/pipelines.yml | 1 | # This file is where you define your pipelines. You can define multiple. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | config/logstash.yml | 401 | # Determine where to allocate memory buffers, for plugins that leverage them. | COMMENT |
| LOW | logstash-core/spec/logstash/runner_spec.rb | 567 | # The runner should just pass the code from the agent execute | COMMENT |
| MEDIUM | logstash-core/spec/logstash/java_pipeline_spec.rb | 264 | # test harness for https://github.com/elastic/logstash/issues/6055 | COMMENT |
| LOW | logstash-core/lib/logstash/agent.rb | 590 | # In this context I could just call shutdown, but I've decided to | COMMENT |
| LOW | logstash-core/lib/logstash/util.rb | 118 | # dst doesn't have this key, just set it. | COMMENT |
| LOW | logstash-core/lib/logstash/util.rb | 155 | # dst doesn't have this key, just set it. | COMMENT |
| LOW | logstash-core/lib/logstash/runner.rb | 301 | # Skip any validation and just return the version | COMMENT |
| LOW | logstash-core/lib/logstash/api/modules/base.rb | 51 | # So we manually create a new instance of NotFound and just pass it down. | COMMENT |
| MEDIUM | …ldkite/scripts/dra/build-and-push-observability-sre.sh | 4 | # This allows us to utilize the make file for building the container and | COMMENT |
| MEDIUM | lib/bootstrap/rspec.rb | 21 | # Essentially we end up with a load path that favors bundlers gem env over stdlib. This is | COMMENT |
| LOW | lib/pluginmanager/install.rb | 43 | # if we dont detect an pack we will just use the normal `Bundle install` Strategy` | COMMENT |
| LOW | …k/qa/integration/management/multiple_pipelines_spec.rb | 155 | # In the case that some part of the path is missing just return nil | COMMENT |
| LOW | x-pack/lib/config_management/hooks.rb | 30 | # If xpack is enabled we can safely remove the local source completely and just use | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ldkite/scripts/health-report-tests/config_validator.py | 56 | print(f"Error in YAML file: {exc}") | CODE |
| LOW | .buildkite/scripts/health-report-tests/main.py | 78 | except Exception as e: | CODE |
| LOW | .buildkite/scripts/snyk/plugins-scan/generate-steps.py | 54 | except Exception as e: | CODE |
| LOW | .buildkite/scripts/snyk/artifact-scan/generate-steps.py | 16 | except Exception as e: | CODE |
| MEDIUM | .buildkite/scripts/snyk/artifact-scan/generate-steps.py | 17 | print(f"Error: Failed to fetch logstash versions: {e}", file=sys.stderr) | CODE |
| MEDIUM | .buildkite/scripts/snyk/artifact-scan/generate-steps.py | 11 | def fetch_logstash_versions() -> dict: | CODE |
| MEDIUM | …anup-artifact-stale-projects/cleanup-stale-projects.py | 55 | print("Error: SNYK_TOKEN environment variable is required", file=sys.stderr) | CODE |
| LOW | …anup-artifact-stale-projects/cleanup-stale-projects.py | 81 | except Exception as e: | CODE |
| MEDIUM | …anup-artifact-stale-projects/cleanup-stale-projects.py | 82 | print(f"Error: Failed to fetch logstash versions: {e}", file=sys.stderr) | CODE |
| MEDIUM | …anup-artifact-stale-projects/cleanup-stale-projects.py | 108 | print("Error: Could not find logstash org", file=sys.stderr) | CODE |
| MEDIUM | …anup-artifact-stale-projects/cleanup-stale-projects.py | 143 | print(f"Error: Could not find target '{ARTIFACT_SCAN_REMOTE_REPO_URL}'", file=sys.stderr) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/reference/monitoring-with-opentelemetry.md | 104 | api_key: "your-api-key" | CODE |
| HIGH | docs/reference/ea-integration-tutorial.md | 110 | api_key => "your-api-key" | CODE |
| HIGH | docs/reference/ea-integration-tutorial.md | 118 | api_key => "your-api-key" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .buildkite/scripts/jdk-matrix-tests/generate-steps.py | 0 | convert and return key to an acceptable format for buildkite's key: field only alphanumerics, dashes and underscores are | STRING |
| HIGH | .buildkite/scripts/dra/generatesteps.py | 0 | convert and return key to an acceptable format for buildkite's key: field only alphanumerics, dashes and underscores are | STRING |
| HIGH | .buildkite/scripts/exhaustive-tests/generate-steps.py | 0 | convert and return key to an acceptable format for buildkite's key: field only alphanumerics, dashes and underscores are | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | logstash-core/lib/logstash/config/mixin.rb | 567 | if !File.exist?(value.first) # Check if the file exists | CODE |
| LOW | logstash-core/lib/logstash/config/source/local.rb | 192 | # Check if configuration auto-reload is used that -f is specified | COMMENT |
| LOW | logstash-core/lib/logstash/config/source/local.rb | 196 | # Check if both -f and -e are present | COMMENT |
| LOW | logstash-core/lib/logstash/inputs/threadable.rb | 24 | # Set this to the number of threads you want this input to spawn. | COMMENT |
| LOW | …ildkite/scripts/snyk/artifact-scan/extract_versions.rb | 230 | # Check if the pom.properties artifact matches the JAR name | COMMENT |
| LOW | …te/scripts/dra/multi-architecture-observability-sre.sh | 10 | # Set INCLUDE_COMMIT_ID to include git SHA in version | COMMENT |
| LOW | lib/pluginmanager/install.rb | 126 | # Check if the specified gems contains | COMMENT |
| LOW | …k/lib/monitoring/inputs/metrics/stats_event_factory.rb | 119 | # Check if pipeline is nil to avoid race condition where metrics system refers pipeline that has been stopped al | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | logstash-core/lib/logstash/plugin.rb | 49 | # --------------------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | logstash-core/lib/logstash/plugin.rb | 55 | # --------------------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | logstash-core/lib/logstash/plugin_metadata.rb | 32 | # ------------------ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | logstash-core/spec/logstash/pipeline_pq_file_spec.rb | 59 | let(:dummy_id) { "my-dummyid" } | CODE |
| LOW | logstash-core/spec/logstash/pipeline_pq_file_spec.rb | 72 | id => "#{dummy_id}" | CODE |
| LOW | logstash-core/spec/logstash/java_pipeline_spec.rb | 1588 | let(:dummy_id) { "my-multiline" } | CODE |
| LOW | logstash-core/spec/logstash/java_pipeline_spec.rb | 1602 | id => "#{dummy_id}" | CODE |
| LOW | logstash-core/spec/logstash/java_pipeline_spec.rb | 1664 | [dummy_id, dummy_id_other].map(&:to_sym).each do |id| | CODE |
| LOW | logstash-core/spec/logstash/java_pipeline_spec.rb | 1686 | [dummy_id, dummy_id_other].map(&:to_sym).each do |id| | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .buildkite/scripts/snyk/plugins-scan/generate-steps.py | 133 | cd logstash && ./gradlew clean bootstrap installDefaultGems && cd .. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ogstash-docgen/lib/logstash/docgen/github_generator.rb | 135 | # This class orchestrate all the operation between the `logstash-plugins` organization and the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ci/test_plugins.rb | 8 | # Usage example: | COMMENT |
| LOW | .buildkite/scripts/benchmark/marathon.sh | 7 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ldkite/scripts/health-report-tests/config_validator.py | 21 | CODE | |
| LOW | .buildkite/scripts/health-report-tests/main.py | 39 | CODE | |
| LOW | .buildkite/scripts/snyk/artifact-scan/generate-steps.py | 37 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ldkite/scripts/health-report-tests/config_validator.py | 2 | CODE | |
| LOW | .buildkite/scripts/dra/generatesteps.py | 2 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | logstash-core/lib/logstash/config/config_ast.rb | 421 | # so we must make sure to return the current event. | COMMENT |