from datetime import datetime
import re

from dogstream import common

LOG4J_PRIORITY = [
    "TRACE",
    "DEBUG",
    "INFO",
    "WARN",
    "ERROR",
    "FATAL",
]

ALERT_TYPES = {
    "FATAL": "error",
    "ERROR": "error",
    "WARN": "warning",
    "INFO": "info",
    "DEBUG": "info",
    "TRACE": "info",
}

EVENT_TYPE = "cassandra.compaction"

THREADS = [
    "CompactionExecutor",
]

DATE_FORMAT = '%Y-%m-%d %H:%M:%S,%f'
LEGACY_DATE_FORMAT = '%Y-%m-%d %H:%M:%S'

# Parse Cassandra default system.log log4j pattern: %5p [%t] %d{ISO8601} %F (line %L) %m%n
LOG_PATTERN = re.compile(r"".join([
    r"\s*(?P<priority>%s)\s+" % "|".join("(%s)" % p for p in LOG4J_PRIORITY),
    r"(\[CompactionExecutor:\d*\]\s+)?", # optional thread name and number
    r"((?P<timestamp>\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2},\d*)|",
        r"(?P<time>\d{2}:\d{2}:\d{2},\d*))\s+",
    r"(\w+\.java \(line \d+\)\s+)?", # optional source file and line
    r"(?P<msg>Compact(ed|ing) .*)\s*",
]))


def parse_date(timestamp):
    try:
        return common.parse_date(timestamp, DATE_FORMAT)
    except ValueError:
        # Only Python >= 2.6 supports %f in the date string
        timestamp, _ = timestamp.split(',')
        common.parse_date(timestamp, LEGACY_DATE_FORMAT)

def parse_cassandra(log, line):
    matched = LOG_PATTERN.match(line)
    if matched:
        event = matched.groupdict()

        # Convert the timestamp string into an epoch timestamp
        time_val = event.get('time', None)
        if time_val:
            event['timestamp'] = parse_date("%s %s" % (datetime.utcnow().strftime("%Y-%m-%d"), time_val))
        else:
            try:
                event['timestamp'] = parse_date(event['timestamp'])
            except ValueError:
                # only python >= 2.6 supports %f in strptime
                event
        del event['time']

        # Process the log priority
        event['alert_type'] = ALERT_TYPES.get(event['priority'], "info")
        if event['alert_type'] in ('error', 'warning'):
            event['auto_priority'] = 1
        else:
            event['auto_priority'] = 0
        del event['priority']

        # Process the aggregation metadata
        event['event_type'] = EVENT_TYPE

        # Process the message
        msg = event['msg']
        if len(msg) > common.MAX_TITLE_LEN:
            event['msg_title'] = msg[0:common.MAX_TITLE_LEN]
            event['msg_text'] = msg
        else:
            event['msg_title'] = msg
        del event['msg']

        return [event]
    else:
        return None

@@ -1204,16 +1204,23 @@
         
+return 
 common.p

Fix Cassandra dogstream date parsing for python25.