-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathvmkeventd.json
42 lines (41 loc) · 1.21 KB
/
vmkeventd.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
{
"vmkeventd_log" : {
"title" : "vmware vmkeventd",
"description" : "vmware's vmkeventd log format",
"url" : "",
"regex" : {
"std" : {
"pattern" : "^(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}Z) (?<processname>\\w+)\\[(?<psid>\\d+)\\]: (?<level>\\w{1})(?<errornumber>\\d+): (?:(?<messagetype>\\w+):|(?<body>.*))$"
}
},
"level-field" : "level",
"level" : {
"warning" : "W",
"error" : "E",
"info" : "I"
},
"value" : {
"processname" : {
"kind" : "string",
"identifier" : true
},
"psid" : {
"kind" : "integer",
"identifier" : true
},
"errornumber" : {
"kind" : "integer",
"identifier" : true
},
"messagetype" : {
"kind" : "string",
"identifier" : true
}
},
"sample" : [
{
"line" : "2015-02-05T15:00:28Z vmkeventd[33449]: I120: Could not expand environment variable HOME."
}
]
}
}