550550 "fields" : [" timestamp" , " process_id" , " log_level" , " sql_statement" ]
551551 }
552552 ]
553+ },
554+ {
555+ "name" : " java" ,
556+ "regex" : [
557+ {
558+ "pattern" : " ^(?<timestamp_fb>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2},\\ d{3})\\ s+(?<log_level>\\ w+)\\ s+\\ [(?<thread>[^\\ ]]+)\\ ]\\ s+(?<logger>[^\\ s]+)\\ s+-\\ s+(?<client_ip>[^\\ s]+)\\ s+(?<http_method>\\ w+)\\ s+(?<url>\/\/ [^\\ s]+)\\ s+(?<http_version>HTTP\/\\ d+\\ .\\ d+)\\ s+(?<status_code>\\ d+)$" ,
559+ "fields" : [" timestamp_fb" , " stream" , " log_type" , " timestamp" , " log_level" , " thread" , " logger" , " client_ip" , " http_method" , " http_version" , " status_code" ]
560+ }
561+ ]
562+ },
563+ {
564+ "name" : " nginx_access" ,
565+ "regex" : [
566+ {
567+ "pattern" : " (?<remote_addr>[^ ]*) - (?<remote_user>[^ ]*) \\ [(?<timestamp>[^\\ ]]*)\\ ] \" (?<method>\\ S+)(?: +(?<request>[^\" ]*?)(?: +\\ S*)?)?\" (?<status>[^ ]*) (?<body_bytes_sent>[^ ]*) \" (?<http_referer>[^\" ]*)\" \" (?<http_user_agent>[^\" ]*)\" (?<request_length>[^ ]*) (?<request_time>[^ ]*) \\ [(?<proxy_upstream_name>[^ ]*)\\ ] \\ [(?<proxy_alternative_upstream_name>[^ ]*)\\ ] (?<upstream_addr>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<upstream_response_length>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<upstream_response_time>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<upstream_status>[^,]*),?(?:[^,]*),?(?:[^ ]*) (?<req_id>[^ ]*)" ,
568+ "fields" : [" remote_addr" , " remote_user" , " timestamp" , " method" , " request" , " status" , " body_bytes_sent" , " http_referer" , " http_user_agent" , " request_length" , " request_time" , " proxy_upstream_name" , " proxy_alternative_upstream_name" , " upstream_addr" , " upstream_response_length" , " upstream_response_time" , " upstream_status" , " req_id" ]
569+ }
570+ ]
571+ },
572+ {
573+ "name" : " postgres" ,
574+ "regex" : [
575+ {
576+ "pattern" : " ^(?<timestamp_fb>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2} \\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d{3} GMT)\\ s+\\ [(?<process_id>\\ d+)\\ ]\\ s+(?<log_level>\\ w+):\\ s+(?<message>.+)$" ,
577+ "fields" : [" timestamp_fb" , " stream" , " log_type" , " timestamp" , " process_id" , " log_level" , " message" ]
578+ }
579+ ]
580+ },
581+ {
582+ "name" : " zookeeper" ,
583+ "regex" : [
584+ {
585+ "pattern" : " ^(?<timestamp_fb>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2} \\ d{2}:\\ d{2}:\\ d{2},\\ d{3})\\ s+\\ [(?<myid>[^\\ ]]*)\\ ]\\ s+-\\ s+(?<log_level>[A-Z]+)\\ s+\\ [(?<thread>[^\\ ]]+)\\ ]\\ s+-\\ s+(?<message>.+)$" ,
586+ "fields" : [" timestamp_fb" , " stream" , " log_type" , " timestamp" , " myid" , " log_level" , " thread" , " message" ]
587+ }
588+ ]
589+ },
590+ {
591+ "name" : " csi" ,
592+ "regex" : [
593+ {
594+ "pattern" : " ^(?<timestamp>\\ d{4}-\\ d{2}-\\ d{2}T\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d+Z)\\ s+(?<stream>\\ w+)\\ s+(?<log_type>\\ w+)\\ s+(?<severity>[IWEF])(?<month>\\ d{2})(?<day>\\ d{2})\\ s+(?<time>\\ d{2}:\\ d{2}:\\ d{2}\\ .\\ d{6})\\ s+(?<pid>\\ d+)\\ s+(?<source_file>[^:]+):(?<line_number>\\ d+)\\ ]\\ s+(?<message>.*)$" ,
595+ "fields" : [" timestamp" , " stream" , " log_type" , " severity" , " month" , " day" , " time" , " pid" , " source_file" , " line_number" , " message" ]
596+ }
597+ ]
553598 }
554- ]
599+ ]
600+
0 commit comments