Increase detections for third-party loggers

[gotbadger]

Proposal

We can improve our rules by adding some rules for the following monitoring tools, I've also looked at the number of downloads for their gems to give a rough idea of popularity.

• NewRelic (119M)

  • log collection on by default in latest version
  • config options we could check and Tracer Options
  • Manual Errors aka notice

• Sentry (83M) old gem

  • Check Fitering of params
  • Tagging and Tracing

• Rollbar (44M)

  • Rollbar.error etc.
  • before_process
  • transform
  • custom_data_method
  • log_payload?
  • person_method (and individual config options)
  • scrub_fields

• Datadog (44M) - log collection @didroe

  • Filtering params
  • https://docs.datadoghq.com/logs/log_collection/ruby/
  • Spans - https://docs.datadoghq.com/tracing/guide/add_span_md_and_graph_it/?code-lang=ruby
  • Scrubbing data

• Airbrake (37M)

  • Notify @elsapet feat(ruby rules): add third-party airbrake rule for notify methods #514
  • Filtering params

• Bugsnag (33M) @cfabianski

  • feat: add bugsnag and honeybadger support #509
  • Various things here like notify, user identification, breadcrumbs, diagnostic data.

• HoneyBadger (22M) @cfabianski

  • feat: add bugsnag and honeybadger support #509
  • Notify similar to sentry
  • Tagging

• Scout APM (12M) @didroe

  • Custom instrumentation

OpenTelemetry

• limited ruby support (just tracing) feat: add ruby open telemetry rule #520
• Tracing we might want to monitor https://opentelemetry.io/docs/instrumentation/ruby/manual/#get-the-current-span

Used By

• Appdynamics

Others to keep an eye on

• Splunk
  • Gem Deprecated (2017) https://github.com/splunk/splunk-sdk-ruby
  • Integration now though REST API - covered by other policies?

[gotbadger]

We've now finished all rules we felt were feasible at this stage and have covered most of the common use cases.

I've left the items we did not cover as bullet points to show coverage and remain as points to go deeper on in the future if we get feedback that its required.