550
550
"fields" : [" timestamp" , " process_id" , " log_level" , " sql_statement" ]
551
551
}
552
552
]
553
+ },
554
+ {
555
+ "name" : " java" ,
556
+ "regex" : [
557
+ {
558
+ "pattern" : " ^(?<timestamp_fb>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2},\\ d{3})\\ s+(?<log_level>\\ w+)\\ s+\\ [(?<thread>[^\\ ]]+)\\ ]\\ s+(?<logger>[^\\ s]+)\\ s+-\\ s+(?<client_ip>[^\\ s]+)\\ s+(?<http_method>\\ w+)\\ s+(?<url>\/\/ [^\\ s]+)\\ s+(?<http_version>HTTP\/\\ d+\\ .\\ d+)\\ s+(?<status_code>\\ d+)$" ,
559
+ "fields" : [" timestamp_fb" , " stream" , " log_type" , " timestamp" , " log_level" , " thread" , " logger" , " client_ip" , " http_method" , " http_version" , " status_code" ]
560
+ }
561
+ ]
562
+ },
563
+ {
564
+ "name" : " nginx_access" ,
565
+ "regex" : [
566
+ {
567
+ "pattern" : " (?<remote_addr>[^ ]*) - (?<remote_user>[^ ]*) \\ [(?<timestamp>[^\\ ]]*)\\ ] \" (?<method>\\ S+)(?: +(?<request>[^\" ]*?)(?: +\\ S*)?)?\" (?<status>[^ ]*) (?<body_bytes_sent>[^ ]*) \" (?<http_referer>[^\" ]*)\" \" (?<http_user_agent>[^\" ]*)\" (?<request_length>[^ ]*) (?<request_time>[^ ]*) \\ [(?<proxy_upstream_name>[^ ]*)\\ ] \\ [(?<proxy_alternative_upstream_name>[^ ]*)\\ ] (?<upstream_addr>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<upstream_response_length>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<upstream_response_time>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<upstream_status>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<req_id>[^ ]*)" ,
568
+ "fields" : [" remote_addr" , " remote_user" , " timestamp" , " method" , " request" , " status" , " body_bytes_sent" , " http_referer" , " http_user_agent" , " request_length" , " request_time" , " proxy_upstream_name" , " proxy_alternative_upstream_name" , " upstream_addr" , " upstream_response_length" , " upstream_response_time" , " upstream_status" , " req_id" ]
569
+ }
570
+ ]
571
+ },
572
+ {
573
+ "name" : " postgres" ,
574
+ "regex" : [
575
+ {
576
+ "pattern" : " ^(?<timestamp_fb>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2} \\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d{3} GMT)\\ s+\\ [(?<process_id>\\ d+)\\ ]\\ s+(?<log_level>\\ w+):\\ s+(?<message>.+)$" ,
577
+ "fields" : [" timestamp_fb" , " stream" , " log_type" , " timestamp" , " process_id" , " log_level" , " message" ]
578
+ }
579
+ ]
580
+ },
581
+ {
582
+ "name" : " zookeeper" ,
583
+ "regex" : [
584
+ {
585
+ "pattern" : " ^(?<timestamp_fb>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2} \\ d{2}:\\ d{2}:\\ d{2},\\ d{3})\\ s+\\ [(?<myid>[^\\ ]]*)\\ ]\\ s+-\\ s+(?<log_level>[A-Z]+)\\ s+\\ [(?<thread>[^\\ ]]+)\\ ]\\ s+-\\ s+(?<message>.+)$" ,
586
+ "fields" : [" timestamp_fb" , " stream" , " log_type" , " timestamp" , " myid" , " log_level" , " thread" , " message" ]
587
+ }
588
+ ]
589
+ },
590
+ {
591
+ "name" : " csi" ,
592
+ "regex" : [
593
+ {
594
+ "pattern" : " ^(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<severity>[IWEF])(?<month>\\ d{2})(?<day>\\ d{2})\\ s+(?<time>\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d{6})\\ s+(?<pid>\\ d+)\\ s+(?<source_file>[^:]+):(?<line_number>\\ d+)\\ ]\\ s+(?<message>.*)$" ,
595
+ "fields" : [" timestamp" , " stream" , " log_type" , " severity" , " month" , " day" , " time" , " pid" , " source_file" , " line_number" , " message" ]
596
+ }
597
+ ]
553
598
}
554
- ]
599
+ ]
600
+
0 commit comments