Test with a right-trim state machine

x-pack/filebeat/processors/decode_cef/cef/cef.go

@@ -13,12 +13,19 @@ import (
 
 // Parser is generated from a ragel state machine using the following command:
 //go:generate ragel -Z -G1 cef.rl -o parser.go
+//go:generate ragel -Z -G1 trim.rl -o trim.go
 //go:generate goimports -l -w parser.go
-
+//go:generate goimports -l -w trim.go
+//
+// Run go vet and remove any unreachable code in the generated parser.go.
+// The go generator outputs duplicated goto statements sometimes.
+//
 // An SVG rendering of the state machine can be viewed by opening cef.svg in
 // Chrome / Firefox.
 //go:generate ragel -V -p cef.rl -o cef.dot
 //go:generate dot -T svg cef.dot -o cef.svg
+//go:generate ragel -V -p trim.rl -o trim.dot
+//go:generate dot -T svg trim.dot -o trim.svg
 
 // Field is CEF extension field value.
 type Field struct {

x-pack/filebeat/processors/decode_cef/cef/cef.rl

@@ -17,6 +17,8 @@ import (
 
 // unpack unpacks a CEF message.
 func (e *Event) unpack(data string) error {
+    data = trimTrailingSpace(data)
+
     cs, p, pe, eof := 0, 0, len(data), len(data)
     mark := 0