2020-09-03 14:05:06 +00:00
|
|
|
[PARSER]
|
|
|
|
|
Name nginx
|
|
|
|
|
Format regex
|
|
|
|
|
Regex ^(?<remote>[^ ]*) (?<host>[^ ]*) (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")
|
|
|
|
|
Time_Key time
|
|
|
|
|
Time_Format %d/%b/%Y:%H:%M:%S %z
|
|
|
|
|
|
|
|
|
|
[PARSER]
|
|
|
|
|
Name json
|
|
|
|
|
Format json
|
|
|
|
|
Time_Key time
|
|
|
|
|
Time_Format %d/%b/%Y:%H:%M:%S %z
|
|
|
|
|
|
|
|
|
|
[PARSER]
|
|
|
|
|
Name syslog-rfc5424
|
|
|
|
|
Format regex
|
|
|
|
|
Regex ^\<(?<pri>[0-9]{1,5})\>1 (?<time>[^ ]+) (?<host>[^ ]+) (?<ident>[^ ]+) (?<pid>[-0-9]+) (?<msgid>[^ ]+) (?<extradata>(\[(.*)\]|-)) (?<message>.+)$
|
|
|
|
|
Time_Key time
|
|
|
|
|
Time_Format %Y-%m-%dT%H:%M:%S.%L%z
|
|
|
|
|
Time_Keep On
|
|
|
|
|
|
|
|
|
|
[PARSER]
|
|
|
|
|
Name syslog-rfc3164-local
|
|
|
|
|
Format regex
|
|
|
|
|
Regex ^\<(?<pri>[0-9]+)\>(?<time>[^ ]* {1,2}[^ ]* [^ ]*) (?<ident>[a-zA-Z0-9_\/\.\-]*)(?:\[(?<pid>[0-9]+)\])?(?:[^\:]*\:)? *(?<message>.*)$
|
|
|
|
|
Time_Key time
|
|
|
|
|
Time_Format %b %d %H:%M:%S
|
|
|
|
|
Time_Keep On
|
|
|
|
|
|
|
|
|
|
[PARSER]
|
|
|
|
|
Name syslog-rfc3164
|
|
|
|
|
Format regex
|
|
|
|
|
Regex /^\<(?<pri>[0-9]+)\>(?<time>[^ ]* {1,2}[^ ]* [^ ]*) (?<host>[^ ]*) (?<ident>[a-zA-Z0-9_\/\.\-]*)(?:\[(?<pid>[0-9]+)\])?(?:[^\:]*\:)? *(?<message>.*)$/
|
|
|
|
|
Time_Key time
|
|
|
|
|
Time_Format %b %d %H:%M:%S
|
|
|
|
|
Time_Format %Y-%m-%dT%H:%M:%S.%L
|
|
|
|
|
Time_Keep On
|
|
|
|
|
|
|
|
|
|
[PARSER]
|
2020-09-03 15:07:39 +00:00
|
|
|
Name symfony
|
2020-09-03 14:05:06 +00:00
|
|
|
Format regex
|
2020-09-03 15:07:39 +00:00
|
|
|
Regex ^\[(?<timestamp>[^ ](.*))] (?<facility>[a-zA-Z0-9_\/\-]*).(?<serverity>[a-zA-Z0-9]*): (?<message>(.*))
|
|
|
|
|
Time_Keep On
|
