- fix multiline specs
- added 'source' setting to multiline filter now that there's no
required "@message" field (due to event v1 schema)
Disable the 'prune' filter spec because the test should have always failed, but it didn't, and I'm not sure what to do next...
Style improvements; alsos kip the event if it doesn't have the given source field
event v1
A recent change to the test_utils.rb made filter yields appear earlier than the 'return' event, so updating the clone test to acknowledge the order change
- no more sys/uname
Fix some support-originating specs
basic codec framework with eventv1 schema
split out event rspecs
Get tests working for eventv1.
let base class handle on_event assignment
convert more inputs to codecs
- ignore rbx stuff
- be more explicit about what methods are provided.
- make @timestamp a Time object. This removes a bunch of old string date
  parsing code (hurray!)

  This code continues to be a work in progress and may not work yet.
Explicitly document that kv uses regex character classes.

It was unclear that one would need to escape special regex characters
and how to do it properly.
Merge pull request #504 from relateiq/master

Explicitly document that kv uses regex character classes
- add technology principle
Detect ruby engine
- Add support for the -f flag