
Research
TeamPCP-Linked Supply Chain Attack Hits SAP CAP and Cloud MTA npm Packages
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.
logstash-input-jdbc
Advanced tools
This is a plugin for Logstash.
It is fully free and fully open source. The license is Apache 2.0, meaning you are pretty much free to use it however you want in whatever way.
Logstash provides infrastructure to automatically generate documentation for this plugin. We use the asciidoc format to write documentation so any comments in the source code will be first converted into asciidoc and then into html. All plugin documentation are placed under one central location.
[source,ruby] directiveNeed help? Try #logstash on freenode IRC or the https://discuss.elastic.co/c/logstash discussion forum.
To get started, you'll need JRuby with the Bundler gem installed.
Create a new plugin or clone and existing from the GitHub logstash-plugins organization.
Install dependencies
bundle install
bundle exec rspec
The Logstash code required to run the tests/specs is specified in the Gemfile by the line similar to:
gem "logstash", :github => "elasticsearch/logstash", :branch => "1.5"
To test against another version or a local Logstash, edit the Gemfile to specify an alternative location, for example:
gem "logstash", :github => "elasticsearch/logstash", :ref => "master"
gem "logstash", :path => "/your/local/logstash"
Then update your dependencies and run your tests:
bundle install
bundle exec rspec
tools/Gemfile and add the local plugin path, for example:gem "logstash-input-jdbc", :path => "/your/local/logstash-input-jdbc"
rake vendor:gems
bin/logstash -e 'input {jdbc {..}}'
At this point any modifications to the plugin code will be applied to this local Logstash setup. After modifying the plugin, simply rerun Logstash.
gem build logstash-input-jdbc.gemspec
bin/plugin install /your/local/plugin/logstash-input-jdbc.gem
Reading data from MySQL:
input {
jdbc {
jdbc_driver_library => "/path/to/mysql-connector-java-5.1.33-bin.jar"
jdbc_driver_class => "com.mysql.jdbc.Driver"
jdbc_connection_string => "jdbc:mysql://host:port/database"
jdbc_user => "user"
jdbc_password => "password"
# or jdbc_password_filepath => "/path/to/my/password_file"
statement => "SELECT ..."
jdbc_paging_enabled => "true"
jdbc_page_size => "50000"
}
}
filter {
[some filters here]
}
output {
stdout {
codec => rubydebug
}
elasticsearch_http {
host => "host"
index => "myindex"
}
}
All contributions are welcome: ideas, patches, documentation, bug reports, complaints, and even something you drew up on a napkin.
Programming is not a required skill. Whatever you've seen about open source and maintainers or community members saying "send patches or die" - you will not see that here.
It is more important to me that you are able to contribute.
For more information about contributing, see the CONTRIBUTING file.
FAQs
Unknown package
We found that logstash-input-jdbc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.

Research
/Security News
Socket is tracking cloned Open VSX extensions tied to GlassWorm, with several updated from benign-looking sleepers into malware delivery vehicles.