From 91196445c20398637fea4b7def92d388b07b6526 Mon Sep 17 00:00:00 2001
From: Curtis Maddalozzo <cmaddalozzo@users.noreply.github.com>
Date: Thu, 10 Apr 2025 22:05:36 -0400
Subject: [PATCH] conf: parsers: fix istio-envoy-proxy parser regex

Signed-off-by: Curtis Maddalozzo <cmaddalozzo@users.noreply.github.com>
---
 conf/parsers.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/conf/parsers.conf b/conf/parsers.conf
index ec1b11bf910..4914b0802ba 100644
--- a/conf/parsers.conf
+++ b/conf/parsers.conf
@@ -107,10 +107,10 @@
     Time_Key start_time
 
 [PARSER]
-    # https://rubular.com/r/17KGEdDClwiuDG
+    # https://rubular.com/r/hbsTIxFFMozLmh
     Name    istio-envoy-proxy
     Format  regex
-    Regex ^\[(?<start_time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)? (?<protocol>\S+)" (?<response_code>[^ ]*) (?<response_flags>[^ ]*) (?<response_code_details>[^ ]*) (?<connection_termination_details>[^ ]*) (?<upstream_transport_failure_reason>[^ ]*) (?<bytes_received>[^ ]*) (?<bytes_sent>[^ ]*) (?<duration>[^ ]*) (?<x_envoy_upstream_service_time>[^ ]*) "(?<x_forwarded_for>[^ ]*)" "(?<user_agent>[^\"]*)" "(?<x_request_id>[^\"]*)" (?<authority>[^ ]*)" "(?<upstream_host>[^ ]*)" (?<upstream_cluster>[^ ]*) (?<upstream_local_address>[^ ]*) (?<downstream_local_address>[^ ]*) (?<downstream_remote_address>[^ ]*) (?<requested_server_name>[^ ]*) (?<route_name>[^  ]*)
+    Regex ^\[(?<start_time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)? (?<protocol>\S+)" (?<response_code>[^ ]*) (?<response_flags>[^ ]*) (?<response_code_details>[^ ]*) (?<connection_termination_details>[^ ]*) "(?<upstream_transport_failure_reason>[^ ]*)" (?<bytes_received>[^ ]*) (?<bytes_sent>[^ ]*) (?<duration>[^ ]*) (?<x_envoy_upstream_service_time>[^ ]*) "(?<x_forwarded_for>[^ ]*)" "(?<user_agent>[^\"]*)" "(?<x_request_id>[^\"]*)" "(?<authority>[^ ]*)" "(?<upstream_host>[^ ]*)" (?<upstream_cluster>[^ ]*) (?<upstream_local_address>[^ ]*) (?<downstream_local_address>[^ ]*) (?<downstream_remote_address>[^ ]*) (?<requested_server_name>[^ ]*) (?<route_name>[^  ]*)$
     Time_Format %Y-%m-%dT%H:%M:%S.%L%z
     Time_Keep   On
     Time_Key start_time