Aleksander Cynarski
dad8a7ff4c
All checks were successful
continuous-integration/drone/push Build is passing
54 lines
2.9 KiB
Plaintext
54 lines
2.9 KiB
Plaintext
# Example openstack parsers, see source for recent updates:
|
|
# https://github.com/salt-formulas/salt-formula-fluentbit/tree/master/metadata/service/config/parser
|
|
|
|
# Take these parsers as an example, as they may not fully fit all possible
|
|
# openstack deployments from all vendors, etc..
|
|
|
|
[PARSER]
|
|
Name cinder
|
|
Format regex
|
|
Regex ^(?<log_time>[^ ][-.\d\+:T]+[ ]*[.:\d]*)\s+(?<pid>[^ ]\d+)\s+(?<severity>[^ ][.-_\w]+)\s+(?<component>[^ ][.-_\w]+)(\s+\[(-|(?<req_id>[^ ][-\w]*) (?<req_user>[^ ][-\w]*) (?<req_project>[^ ][-\w]*) (?<req_domain>[^ ][-\w]*) (?<req_user_domain>[^ ][-\w]*) (?<req_project_domain>[^ ][-\w]*))\]){1}\s+(?<message>.*)$
|
|
Time_Format %Y-%m-%d %H:%M:%S.%L
|
|
Time_Keep Off
|
|
Time_Key log_time
|
|
|
|
[PARSER]
|
|
Name glance
|
|
Format regex
|
|
Regex ^(?<log_time>[^ ][-.\d\+:T]+[ ]*[.:\d]*)\s+(?<pid>[^ ]\d+)\s+(?<severity>[^ ][.-_\w]+)\s+(?<component>[^ ][.-_\w]+)(\s+\[(-|(?<req_id>[^ ][-\w]*) (?<req_user>[^ ][-\w]*) (?<req_project>[^ ][-\w]*) (?<req_domain>[^ ][-\w]*) (?<req_user_domain>[^ ][-\w]*) (?<req_project_domain>[^ ][-\w]*))\]){1}\s+(?<message>.*)$
|
|
Time_Format %Y-%m-%d %H:%M:%S.%L
|
|
Time_Keep Off
|
|
Time_Key log_time
|
|
|
|
[PARSER]
|
|
Name heat
|
|
Format regex
|
|
Regex ^(?<log_time>[^ ][-.\d\+:T]+[ ]*[.:\d]*)\s+(?<pid>[^ ]\d+)\s+(?<severity>[^ ][.-_\w]+)\s+(?<component>[^ ][.-_\w]+)(\s+\[(-|(?<req_id>[^ ][-\w]*) (?<req_user>[^ ][-\w]*) (?<req_project>[^ ][-\w]*) (?<req_domain>[^ ][-\w]*) (?<req_user_domain>[^ ][-\w]*) (?<req_project_domain>[^ ][-\w]*))\]){1}\s+(?<message>.*)$
|
|
Time_Format %Y-%m-%d %H:%M:%S.%L
|
|
Time_Keep Off
|
|
Time_Key log_time
|
|
|
|
[PARSER]
|
|
Name keystone
|
|
Format regex
|
|
Regex ^(?<log_time>[^ ][-.\d\+:T]+[ ]*[.:\d]*)\s+(?<pid>[^ ]\d+)\s+(?<severity>[^ ][.-_\w]+)\s+(?<component>[^ ][.-_\w]+)(\s+\[(-|(?<req_id>[^ ][-\w]*) (?<req_user>[^ ][-\w]*) (?<req_project>[^ ][-\w]*) (?<req_domain>[^ ][-\w]*) (?<req_user_domain>[^ ][-\w]*) (?<req_project_domain>[^ ][-\w]*))\]){1}\s+(?<message>.*)$
|
|
Time_Format %Y-%m-%d %H:%M:%S.%L
|
|
Time_Keep Off
|
|
Time_Key log_time
|
|
|
|
[PARSER]
|
|
Name neutron
|
|
Format regex
|
|
Regex ^(?<log_time>[^ ][-.\d\+:T]+[ ]*[.:\d]*)\s+(?<pid>[^ ]\d+)\s+(?<severity>[^ ][.-_\w]+)\s+(?<component>[^ ][.-_\w]+)(\s+\[(-|(?<req_id>[^ ][-\w]*) (?<req_user>[^ ][-\w]*) (?<req_project>[^ ][-\w]*) (?<req_domain>[^ ][-\w]*) (?<req_user_domain>[^ ][-\w]*) (?<req_project_domain>[^ ][-\w]*))\]){1}\s+(?<message>.*)$
|
|
Time_Format %Y-%m-%d %H:%M:%S.%L
|
|
Time_Keep Off
|
|
Time_Key log_time
|
|
|
|
[PARSER]
|
|
Name nova
|
|
Format regex
|
|
Regex ^(?<log_time>[^ ][-.\d\+:T]+[ ]*[.:\d]*)\s+(?<pid>[^ ]\d+)\s+(?<severity>[^ ][.-_\w]+)\s+(?<component>[^ ][.-_\w]+)(\s+\[(-|(?<req_id>[^ ][-\w]*) (?<req_user>[^ ][-\w]*) (?<req_project>[^ ][-\w]*) (?<req_domain>[^ ][-\w]*) (?<req_user_domain>[^ ][-\w]*) (?<req_project_domain>[^ ][-\w]*))\]){1}\s+(?<message>.*)$
|
|
Time_Format %Y-%m-%d %H:%M:%S.%L
|
|
Time_Keep Off
|
|
Time_Key log_time
|