
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
Elara, the mascot for EventLoggerRails
Are you tired of navigating through logs as if you're lost in the labyrinth of the Wired, searching for that elusive piece of data? Say "Hello, World!" to EventLoggerRails, the Rails engine transmuting your logs into enlightened gems of understanding. 💎
In a single, centralized config file, decipher the events that pulse through the veins of your business. Once set, let EventLoggerRails weave them into intricate patterns of JSON logs that shimmer like a digital mirage. 🎇
Channel these JSON enigmas directly into analytic realms like OpenSearch. There, witness the alchemy of data taking form through real-time visualizations and analysis. 📊✨
EventLoggerRails?Don't let crucial events get lost in the digital void. Make your app's logging as unforgettable as your first journey into the Wired with EventLoggerRails!
Ok, so Elara might be a little zealous about our project, and she seems to be stuck in a 90's anime. Don't let that dissuade you from using this engine, though.
Our no-nonsense project description: EventLoggerRails is a Rails engine for emitting structured events in logs during the execution of business processes for analysis and visualization.
It allows teams to define events in a simple, centralized configuration file, and then log those events in JSON format for further processing.
You can define a registry of events your application emits via the config file (config/event_logger_rails.yml).
The events you define are placed in the config file under the corresponding environment. Most events belong in shared, though you may want to define different
events or event characteristics per environment.
For example, to register a user signup event, first define the event as a registered event. You must include a description for the event, and you may
optionally include a level to use for that specific event.
shared:
user:
signup:
success:
description: 'Indicates a successful user signup.'
failure:
description: 'Indicates a user signup was not successful.'
level: 'error'
Continuing this example, we'll want to log the events we registered. To do so, include the EventLoggerRails::LoggableController concern in the controller that
processes user signup's and call the log_event method to log details about the event:
class UsersController < ApplicationController
include EventLoggerRails::LoggableController
def create
user = User.new(user_params)
if user.save
log_event 'user.signup.success'
redirect_to dashboard_path
else
log_event 'user.signup.failure', data: { errors: user.errors.full_messages }
render :new
end
end
end
In this example, a possible successful signup could be structured like this:
{
"environment": "development",
"format": "application/x-www-form-urlencoded;charset=UTF-8",
"host": "d6aeb6b0516c",
"id": "2b8f44c1-0e42-4a5f-84b8-52659990d138",
"service_name": "DummyApp",
"level": "WARN",
"method": "POST",
"parameters": {
"authenticity_token": "[FILTERED]",
"user": {
"email": "princess@leia.com",
"password": "[FILTERED]"
}
},
"path": "/users",
"remote_ip": "172.20.0.1",
"timestamp": "2023-09-30T06:47:16.938+00:00",
"event_identifier": "user.signup.success",
"event_description": "Indicates a user signup was successful.",
"email": "princess@leia.com",
"action": "create",
"controller": "Registrations"
}
...while a failed signup might look like this:
{
"environment": "development",
"format": "application/x-www-form-urlencoded;charset=UTF-8",
"host": "d6aeb6b0516c",
"id": "2b8f44c1-0e42-4a5f-84b8-52656690d138",
"service_name": "DummyApp",
"level": "ERROR",
"method": "POST",
"parameters": {
"authenticity_token": "[FILTERED]",
"user": {
"email": "",
"password": "[FILTERED]"
},
},
"path": "/users",
"remote_ip": "172.20.0.1",
"timestamp": "2023-09-30T06:47:16.928+00:00",
"event_identifier": "user.signup.failure",
"event_description": "Indicates a user signup was not successful.",
"errors": [
"Email can't be blank",
"Password can't be blank"
],
"email": "princess@leia.com",
"action": "create",
"controller": "Registrations"
}
Note how the log entry from the previous example contains the data passed in via the optional data argument.
You can also provide a logger level as an optional argument if you need to specify a logger level other than the default. If you provide a logger level, it will override the configured event level and the default logger level.
log_event 'user.signup.failure', level: :info, data: { errors: user.errors }
This will output an event with the corresponding severity level. You must provide a valid logger level (:debug, :info, :warn, :error, or :unknown).
{
"environment": "development",
"format": "application/x-www-form-urlencoded;charset=UTF-8",
"host": "d6aeb6b0516c",
"id": "2b8f44c1-0e42-4a5f-84b8-52656690d138",
"service_name": "DummyApp",
"level": "INFO",
"method": "POST",
"parameters": {
"authenticity_token": "[FILTERED]",
"user": {
"email": "",
"password": "[FILTERED]"
},
},
"path": "/users",
"remote_ip": "172.20.0.1",
"timestamp": "2023-09-30T06:47:16.928+00:00",
"event_identifier": "user.signup.failure",
"event_description": "Indicates a user signup was not successful.",
"errors": [
"Email can't be blank",
"Password can't be blank"
],
"email": "princess@leia.com",
"action": "create",
"controller": "Registrations"
}
You can also log events from within models by including the EventLoggerRails::LoggableModel concern and calling log_event.
class User < ApplicationRecord
include EventLoggerRails::LoggableModel
after_create :log_signup
private
def log_signup
log_event 'user.signup.success', data: { email: }
end
end
By default, EventLoggerRails will include the model name, instance ID, and whatever data is passed.
{
"environment": "development",
"format": "application/x-www-form-urlencoded;charset=UTF-8",
"host": "d6aeb6b0516c",
"id": "2b8f44c1-0e42-4a5f-84b8-52652332d138",
"service_name": "DummyApp",
"level": "WARN",
"method": "POST",
"parameters": {
"authenticity_token": "[FILTERED]",
"user": {
"email": "princess@leia.com",
"password": "[FILTERED]"
}
},
"path": "/users",
"remote_ip": "172.20.0.1",
"timestamp": "2023-09-30T06:47:16.817+00:00",
"event_identifier": "user.signup.success",
"event_description": "Indicates a user signup was successful.",
"email": "princess@leia.com",
"model": "User",
"instance_id": 41
}
You can log events from anywhere inside of your application by calling EventLoggerRails.log directly, though you won't get the additional context
from the controller or model.
EventLoggerRails.log 'user.signup.success', level: :info, data: { user_id: @user.id }
There are two expected errors which are handled by EventLoggerRails: an unregistered event and an invalid logger level. Both will result
in a log entry with an event corresponding to the error, and the severity level will be set to ERROR.
If you fail to register an event, the logger will emit an event_logger_rails.event.unregistered event:
{
"environment": "development",
"format": "application/x-www-form-urlencoded;charset=UTF-8",
"host": "d6aeb6b0516c",
"id": "94c5ffe9-1bd8-4e04-88a3-478958e242b0",
"service_name": "DummyApp",
"level": "ERROR",
"method": "POST",
"parameters": {
"authenticity_token": "[FILTERED]",
"user": {
"email": "",
"password": "[FILTERED]"
}
},
"path": "/users",
"remote_ip": "172.20.0.1",
"timestamp": "2023-09-30T07:03:34.993+00:00",
"event_identifier": "event_logger_rails.event.unregistered",
"event_description": "Indicates provided event was unregistered.",
"message": "Event provided not registered: foo.bar"
}
If you provide an invalid log level, the logger will emit an event_logger_rails.logger_level.invalid event:
{
"environment": "development",
"format": "application/x-www-form-urlencoded;charset=UTF-8",
"host": "d6aeb6b0516c",
"id": "11541423-0008-4cc7-aef7-1e4af9a801d7",
"service_name": "DummyApp",
"level": "ERROR",
"method": "POST",
"parameters": {
"authenticity_token": "[FILTERED]",
"user": {
"email": "",
"password": "[FILTERED]"
}
},
"path": "/users",
"remote_ip": "172.20.0.1",
"timestamp": "2023-09-30T07:04:52.623+00:00",
"event_identifier": "event_logger_rails.logger_level.invalid",
"event_description": "Indicates provided level was invalid.",
"message": "Invalid logger level provided: 'foobar'. Valid levels: :debug, :info, :warn, :error, :unknown."
}
Add this line to your application's Gemfile:
gem 'event_logger_rails'
And then execute:
bundle
Or install it yourself as:
gem install event_logger_rails
Run the install generator to create a config file (config/event_logger_rails.yml):
bin/rails generate event_logger_rails:install
Add your events to the generated config file following the structure of the examples.
You can specify a default level EventLoggerRails will use if a level is not included in the call to the logger or configured as a default for the provided event.
This default level is set to :warn unless otherwise specified.
Rails.application.configure do |config|
config.event_logger_rails.default_level = :info
end
You can configure a custom formatter. Reference EventLoggerRails::Formatters::JSON for an example.
Rails.application.configure do |config|
config.event_logger_rails.formatter = 'MyCustomFormatterClass'
end
By default, EventLoggerRails outputs to a separate log file (log/event_logger_rails.#{Rails.env}.log) from normal Rails log output, allowing
you to ingest these logs independently. If you wish to set an alternative log device to capture output, you can configure it in config/application.rb:
Rails.application.configure do |config|
config.event_logger_rails.logdev = 'path/to/log.file'
end
Some platforms require logging output to be sent to $STDOUT. You can configure this as an output device easily enough.
Rails.application.configure do |config|
config.event_logger_rails.logdev = $stdout
end
You can configure a custom logger. Reference EventLoggerRails::EventLogger for an example.
Rails.application.configure do |config|
config.event_logger_rails.logger_class = 'MyCustomLoggerClass'
end
You can also configure the Rails logger to use EventLoggerRails::EventLogger to render structured logs in JSON format with the additional app and request data.
Rails.application.configure do
config.colorize_logging = false
config.log_level = ENV.fetch('RAILS_LOG_LEVEL', :info)
logger = EventLoggerRails::EventLogger.new($stdout)
config.logger = ActiveSupport::TaggedLogging.new(logger)
end
Your inputs echo in this realm. Venture forth and materialize your thoughts through a PR.
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that event_logger_rails demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.