79 lines
2.7 KiB
Plaintext
79 lines
2.7 KiB
Plaintext
|
# Extra set of common parsers
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
# http://rubular.com/r/cCVd1HLCAO
|
||
|
|
Name crowbar
|
||
|
|
Format regex
|
||
|
|
Regex ^.*\[(?<log_time>[^ ][-.\d\+:]+T[:\d]*)([^\]])*?\]\s+?(?<severity>[^ ]\w+)([\s-]*):?\s+(?<message>.*)
|
||
|
|
Time_Format %Y-%m-%dT%H:%M:%S
|
||
|
|
Time_Keep Off
|
||
|
|
Time_Key log_time
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
# http://rubular.com/r/frDgnElXW9
|
||
|
|
Name chefclient
|
||
|
|
Format regex
|
||
|
|
Regex ^\[(?<log_time>[^ ][-.\d\+:]+T[:\d]*)([^\]])*?\]\s+(?<severity>[^ ]\w+):\s+(?<message>.*)$
|
||
|
|
Time_Format %Y-%m-%dT%H:%M:%S
|
||
|
|
Time_Keep Off
|
||
|
|
Time_Key log_time
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
Name mysql_error
|
||
|
|
Format regex
|
||
|
|
#Regex ^(?<log_time>[^ +][ -:0-9TZ]+|[[:upper:]][[:lower:]]{2})(\+\d+:\d+[TZ]*){0,1}\s*(?<myid>[^ ]\d+)\s+\[(?<severity>[^ ]\w+)\](\s+(?<subsystem>[^ ]\w+):){0,1}\s+(?<message>.*)$
|
||
|
|
Regex ^(?<log_time>[^ +][-\d]+[\ T]*[:\dZ]+)\s*(?<myid>[^ ]\d+)\s+\[(?<severity>[^ ]\w+)\](\s+(?<subsystem>[^ ]\w+):){0,1}\s+(?<message>.*)$
|
||
|
|
Time_Format %Y-%m-%d %H:%M:%S
|
||
|
|
Time_Keep Off
|
||
|
|
Time_Key log_time
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
Name mysql_slow
|
||
|
|
Format regex
|
||
|
|
Regex ^# User\@Host:\s+(?<user>[^\@][\w\[\]]+)[@\s]+(?<dbhost>[^ ][-.\w]+)\s+(\[(?<dbhost_address>[.\d]+)\]){0,1}\s+(?<message>.*)$
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
Name pacemaker
|
||
|
|
Format regex
|
||
|
|
Regex ^\s*(?<log_time>[^ ]* {1,2}[^ ]* [^ ]*) \[(?<pid>\d+)\] (?<node>[\-\w]*)\s*(?<component>\w*):\s+(?<severity>\w+):\s+(?<message>.*)$
|
||
|
|
#Time_Format %Y-%m-%dT%H:%M:%S
|
||
|
|
Time_Format %b %d %H:%M:%S
|
||
|
|
Time_Keep Off
|
||
|
|
Time_Key log_time
|
||
|
|
#Types pid:integer
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
Name rabbitmq
|
||
|
|
Format regex
|
||
|
|
Regex ^=(?<severity>[^ ]\w+)\s+REPORT[=\s]*(?<log_time>[^ =][-:.\d\w]+)[\s=]+(?<message>.*)$
|
||
|
|
Time_Format %d-%b-%Y::%H:%M:%S
|
||
|
|
Time_Keep Off
|
||
|
|
Time_Key log_time
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
Name http_statement
|
||
|
|
Format regex
|
||
|
|
Regex ^.*((?<req_method>GET|POST|PUT|DELETE|CONNECT|OPTIONS|HEAD[^ ]\w+)\s*(?<req_path>[^ ][-._?=%&\/[:alnum:]]*)\s*(?<req_protocol>[^ ][.\/\dHTFSP]+){0,1})(['"\s]*){0,1}((\s*status:\s*(?<req_status>[^ ]\d+)){0,1}(\s*len:\ (?<req_len>[^ ]\d+)){0,1}(\s*time:\s*(?<req_log_time>[^ ][.\d]+)){0,1}(\s*microversion:\s*(?<req_mver>[^ ][.\d]+)){0,1}){0,1}$
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
Name universal
|
||
|
|
Format regex
|
||
|
|
Regex ^(?<message>.*)$
|
||
|
|
|
||
|
|
[PARSER]
|
||
|
|
Name uuid
|
||
|
|
Format regex
|
||
|
|
Regex (?<uuid>[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})
|
||
|
|
#UUID v1 :
|
||
|
|
#/^[0-9A-F]{8}-[0-9A-F]{4}-[1][0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}$/i
|
||
|
|
#UUID v2 :
|
||
|
|
#/^[0-9A-F]{8}-[0-9A-F]{4}-[2][0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}$/i
|
||
|
|
#UUID v3 :
|
||
|
|
#/^[0-9A-F]{8}-[0-9A-F]{4}-[3][0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}$/i
|
||
|
|
#UUID v4 :
|
||
|
|
#/^[0-9A-F]{8}-[0-9A-F]{4}-[4][0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}$/i
|
||
|
|
#UUID v5 :
|
||
|
|
#/^[0-9A-F]{8}-[0-9A-F]{4}-[5][0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}$/i
|
||
|
|
|
||
|
|
|