Shorten long SQL query to prevent oversized event (elastic#1416)

* Shorten long SQL query to prevent oversized event

APM server allows events with a max size of 10000 characters. Shorten
queries traced in asyncpg to max allowed.

See: elastic#842

* Fix copied SQL

* fix test

* instrument for test

* move changelog entry to "Unreleased" and fix PR number

Co-authored-by: Benjamin Wohlwend <beni@elastic.co>

Author: stj

CHANGELOG.asciidoc

@@ -29,6 +29,18 @@ endif::[]
 //[float]
 //===== Bug fixes
 
+=== Unreleased
+
+//[float]
+//===== Features
+
+
+[float]
+===== Bug fixes
+
+* asyncpg: Limit SQL queries in context data to 10000 characters {pull}1416[#1416]
+
+
 [[release-notes-6.x]]
 === Python Agent version 6.x
 

elasticapm/instrumentation/packages/asyncio/asyncpg.py

@@ -32,6 +32,7 @@
 from elasticapm.instrumentation.packages.asyncio.base import AsyncAbstractInstrumentedModule
 from elasticapm.instrumentation.packages.dbapi2 import extract_signature
 from elasticapm.utils import default_ports
+from elasticapm.utils.encoding import shorten
 
 
 class AsyncPGInstrumentation(AsyncAbstractInstrumentedModule):
@@ -63,7 +64,8 @@ def get_query(self, method, args):
     async def call(self, module, method, wrapped, instance, args, kwargs):
         query = self.get_query(method, args)
         name = extract_signature(query)
-        context = {"db": {"type": "sql", "statement": query}}
+        sql_string = shorten(query, string_length=10000)
+        context = {"db": {"type": "sql", "statement": sql_string}}
         action = "query"
         destination_info = {
             "address": kwargs.get("host", "localhost"),

tests/instrumentation/asyncio_tests/asyncpg_tests.py

@@ -139,3 +139,17 @@ async def test_fetch_methods(connection, elasticapm_client, method, verify):
     assert span["action"] == "query"
     assert span["sync"] is False
     assert span["name"] == "SELECT FROM test"
+
+
+@pytest.mark.usefixtures("instrument")
+async def test_truncate_long_sql(connection, elasticapm_client):
+    elasticapm_client.begin_transaction("test")
+    await connection.execute(f"SELECT id, name FROM test WHERE name = '{'x' * 10010}';")
+    elasticapm_client.end_transaction("test", "OK")
+
+    transactions = elasticapm_client.events[constants.TRANSACTION]
+    spans = elasticapm_client.spans_for_transaction(transactions[0])
+
+    statement = spans[0]["context"]["db"]["statement"]
+    assert len(statement) == 10000
+    assert statement.endswith("...")