Skip to content

Commit

Permalink
Initial push up.
Browse files Browse the repository at this point in the history
  • Loading branch information
@hagfelsh
hagfelsh committed Jun 25, 2015
1 parent a0109b1 commit 93691c2
Show file tree
Hide file tree
Showing 17 changed files with 638 additions and 0 deletions.
35 changes: 35 additions & 0 deletions candlepin.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
{
"candlepin_log" : {
"title" : "Candlepin log format",
"description" : "Log format used by Candlepin registration system",
"regex" : {
"reqorg" : {
"pattern" : "^(?<timestamp>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) \\[(req=(?<req>[0-9a-f-]+)|=), org=(?<org>\\w*)\\] (?<alert_level>\\w+) (?<module>[\\w.]+) - (?<body>.*)$"
},
"other" : {
"pattern" : "^(?<timestamp>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}[+-]\\d{4}) (?<body>.*)$"
}
},
"value" : {
"req" : { "kind" : "string", "identifier" : true },
"org" : { "kind" : "string", "identifier" : true },
"alert_level" : { "kind" : "string" },
"module" : { "kind" : "string", "identifier" : true },
"body" : { "kind" : "string" }
},
"sample" : [
{
"line" : "2015-04-17 09:41:50,544 [=, org=] INFO org.candlepin.guice.CustomizableModules - Found custom module module.config.katello"
},
{
"line" : "2015-04-17 09:41:56,320 [req=f91d4a84-020d-4874-9741-3979d0baf58d, org=] INFO org.candlepin.common.filter.LoggingFilter - Request: verb=GET, uri=/candlepin/status"
},
{
"line" : "2015-04-17 09:42:39+0200 principalType=trusteduser principal=admin target=OWNER entityId=8ab219c64cc653a7014cc6545a6c0001 type=CREATED owner=8ab219c64cc653a7014cc6545a6c0001"
},
{
"line" : "2015-04-17 10:49:21,912 [req=ec7867ea-2501-4036-bb08-e2d830720cb5, org=npr_goep_hm_com] INFO org.candlepin.common.filter.LoggingFilter - Response: status=200, content-type=\"application/json\", time=235ms"
}
]
}
}
34 changes: 34 additions & 0 deletions cups.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
{
"cups_log" : {
"title" : "CUPS log format",
"description" : "Log format used by the Common Unix Printing System",
"regex" : {
"system" : {
"pattern" : "^(?<level>[IEW]) (?<timestamp>\\d{2}/\\w{3}/\\d{4}:\\d{2}:\\d{2}:\\d{2} [+-]\\d{2}) (?<section>\w+): (?<body>.*)$"
},
"default" : {
"pattern" : "^(?<level>[IEW]) (?<timestamp>\\d{2}/\\w{3}/\\d{4}:\\d{2}:\\d{2}:\\d{2} [+-]\\d{2}) (?<body>.*)$"
}
},
"level" : {
"error" : "E",
"warning" : "W"
},
"value" : {
"level" : { "kind" : "string", "identifier" : true },
"section" : { "kind" : "string", "identifier" : true },
"body" : { "kind" : "string" }
},
"sample" : [
{
"line" : "I [04/Nov/2010:17:37:40 -0400] Allowing up to 100 client connections per host."
},
{
"line" : "I [04/Nov/2010:17:37:40 -0400] LoadPPDs: Wrote "/etc/cups/ppds.dat", 14 PPDs..."
},
{
"line" : "E [04/Nov/2010:17:37:40 -0400] StartListening: Unable to find IP address for server name \"localhost.localdomain\" - Host name lookup failure"
}
]
}
}
34 changes: 34 additions & 0 deletions ehcmd-log.json.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
{

"eqlogic_ehcmd_log" : {
"title": "EQLogic VMware CIM Log",
"description": "The ehcmd.log file found at /var/log/eqlogic in a support bundle",
"url": "",
"regex": {
"std": {
"pattern": "^(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2})Z (?<level>\\w{1}) EHCMD (?<method>\\w+):(?<method_id>\\d+) (?<body>.*)"
}
},
"level-field": "level",
"level": {
"error" : "(?:E|error|eror|e)",
"warning" : "W",
"info" : "I"
},
"value": {
"method": {
"kind": "string",
"identifier": true
},
"method_id": {
"kind": "integer",
"identifier": true
}
},
"sample": [
{
"line" : "2015-06-01T02:27:27Z E EHCMD stack:134 /usr/lib/cim/libdellprovider.so(_ZN13StackConsumerC1ERSt6vectorISsSaISsEE+0x39) [0x1e5ada5b]"
}
]
}
}
34 changes: 34 additions & 0 deletions esxupdate-log.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
{
"esxupdate_log" : {
"title" : "VMWare ESXUpdate Log",
"description" : "Log format used in /var/log/esxupdate.log",
"url" : "",
"regex" : {
"non-level" : {
"pattern" : "^(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}Z) (?<system>\\w+): (?<subsystem>[a-zA-Z0-9\\.]+): (?<level>[A-Z]+): (?<body>.*)$"
}
},
"level-field" : "level",
"level" : {
"error" : "ERROR",
"warning" : "WARNING",
"info" : "INFO",
"debug" : "DEBUG"
},
"value" : {
"system" : {
"kind" : "string",
"identifier" : true
},
"subsystem" : {
"kind" : "string",
"identifier" : true
}
},
"sample" : [
{
"line" : "2015-05-15T11:38:26Z esxupdate: root: INFO: Command = profile.setacceptance"
}
]
}
}
37 changes: 37 additions & 0 deletions katello.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
{
"katello_log" : {
"title" : "Katello log format",
"description" : "Log format used by katello and foreman as used in Satellite 6.",
"url" : "http://theforeman.org/",
"regex" : {
"log" : {
"pattern" : "^\\[\\s?(?<alert_level>\\w+)\\s(?<timestamp>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2})\\s(?<module>\\w+)\\]\\s+(?<message>\\S.*)$"
}
},
"level-field" : "alert_level",
"level" : {
"error" : "ERROR",
"warning": "WARN",
"debug" : "DEBUG"
},
"value" : {
"alert_level" : { "kind" : "string" },
"module" : { "kind" : "string" },
"message" : { "kind" : "string" }
},
"sample" : [
{
"line" : "[DEBUG 2015-05-20 12:22:19 main] /Stage[main]/Certs::Candlepin/Exec[create candlepin qpid exchange]/unless: Failed: ConnectError: [Errno 1] _ssl.c:504: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca"
},
{
"line" : "[DEBUG 2015-05-20 12:22:19 main] Exec[create candlepin qpid exchange](provider=posix): Executing 'qpid-config --ssl-certificate /etc/pki/katello/certs/java-client.crt --ssl-key /etc/pki/katello/private/java-client.key -b 'amqps://avl248.bcc.qld.gov.au:5671' add exchange topic event --durable'"
},
{
"line" : "[ERROR 2015-05-20 12:22:19 main] qpid-config --ssl-certificate /etc/pki/katello/certs/java-client.crt --ssl-key /etc/pki/katello/private/java-client.key -b 'amqps://avl248.bcc.qld.gov.au:5671' add exchange topic event --durable returned 1 instead of one of [0]"
},
{
"line" : "[ INFO 2015-05-20 12:22:19 main] /usr/share/ruby/vendor_ruby/puppet/util/errors.rb:104:in `fail'"
}
]
}
}
47 changes: 47 additions & 0 deletions log4j.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
{
"java_log" : {
"title" : "Java log format",
"description" : "Log format used by log4j and output by most java programs",
"url" : "",
"regex" : {
"jvm" : {
"pattern" : "^(?<alert_level>\\w+)\\s+\\|\\s+jvm (?<jvm_no>\\d+)\\s+\\|\\s(?<timestamp>\\d{4}/\\d{2}/\\d{2} \\d{2}:\\d{2}:\\d{2})\\s+\\| (?<timestamp_f>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) \\[(?<function>\\w+-\\d+)\\]\\s+(?<debug_level>\\w+)\\s+(?<class>[\\w.]+)\\s+-\\s+(?<body>\\S.*)"
},
"dump" : {
"pattern" : "^(?<alert_level>\\w+)\\s+\\|\\s+jvm (?<jvm_no>\\d+)\\s+\\|\\s(?<timestamp>\\d{4}/\\d{2}/\\d{2} \\d{2}:\\d{2}:\\d{2})\\s+\\| JVMDUMP\\w+\\s(?<body>\\S.*)$"
},
"tasko" : {
"pattern" : "^(?<timestamp>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) \\[(?<function>\\w+-\\d+)\\]\\s+(?<alert_level>\\w+)\\s+(?<class>[\\w.]+)\\s+-\\s+(?<body>\\S.*)$"
}
},
"level-field" : "alert_level",
"level" : {
"error" : "ERROR",
"warning" : "WARN",
"debug" : "DEBUG",
"info" : "INFO"
},
"value" : {
"function" : { "kind" : "string", "identifier" : true },
"alert_level" : { "kind" : "string" },
"jvm_no" : { "kind" : "integer" },
"debug_level" : { "kind" : "string" },
"class" : { "kind" : "string" },
"body" : { "kind" : "string" }
},
"sample" : [
{
"line" : "INFO | jvm 1 | 2015/04/28 18:40:00 | 2015-04-28 18:40:00,077 [DefaultQuartzScheduler_Worker-8] INFO com.redhat.rhn.taskomatic.TaskoJob - errata-queue-default: bunch errata-queue-bunch STARTED"
},
{
"line" : "INFO | jvm 1 | 2015/04/28 18:34:18 | 2015-04-28 18:34:18,872 [Thread-46] DEBUG com.redhat.rhn.common.hibernate.ConnectionManager - Adding resource com/redhat/rhn/domain/action/ActionArchType.hbm.xml"
},
{
"line" : "2015-05-22 16:10:00,123 [DefaultQuartzScheduler_Worker-5] INFO com.redhat.rhn.taskomatic.task.ErrataCacheTask - In the queue: 24"
},
{
"line" : "INFO | jvm 1 | 2015/05/24 07:35:50 | JVMDUMP013I Processed dump event \"user\", detail \"\"."
}
]
}
}
47 changes: 47 additions & 0 deletions rayford_strace.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
{
"strace_timefork_log" : {
"title" : "Strace with timestmaps and forks",
"description" : "The strace output format with timestamps, forking, and a long string length to avoid truncation. Command example = strace -s 2048 -f -tt -o /path/to/output.file <binary_to_trace>",
"url" : "http://en.wikipedia.org/wiki/Strace",
"regex" : {
"std" : {
"pattern" : "^(?<pid>\\d+)\\s+(?<timestamp>\\d{2}:\\d{2}:\\d{2}\\.\\d{6}) (?<syscall>\\w+)\\((?<body>.*)\\)\\s+=\\s+(?<rc>[-\\w]+)(?: (?<errno>\\w+) \\([^\\)]+\\))?(?: <(?<duration>\\d+\\.\\d+)>)?$"
}
},
"level-field" : "errno",
"level" : {
"error" : ".+"
},
"value" : {
"pid" : {
"kind" : "integer",
"identifier" : true
},
"syscall" : {
"kind" : "string",
"identifier" : true
},
"args" : {
"kind" : "string"
},
"rc" : {
"kind" : "integer"
},
"duration" : {
"kind" : "float"
},
"errno" : {
"kind" : "string",
"identifier" : true
}
},
"sample" : [
{
"line" : "12406 08:09:33.814936 execve(\"/bin/ls\", [\"ls\"], [/* 38 vars */]) = 0 <0.000264>"
},
{
"line" : "7210 08:09:33.815943 access(\"/etc/ld.so.nohwcap\", F_OK) = -1 ENOENT (No such file or directory) <0.000019>"
}
]
}
}
32 changes: 32 additions & 0 deletions rhn_xmlrpc.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
{
"xmlrpc_log" : {
"title" : "RHN server XMLRPC log format",
"description" : "Generated by Satellite's XMLRPC component",
"url" : "https://access.redhat.com/products/red-hat-satellite",
"regex" : {
"main" : {
"pattern" : "^(?<timestamp>\\d{4}/\\d{2}/\\d{2} \\d{2}:\\d{2}:\\d{2} [+-]?\\d{2}:\\d{2}) (?<pid>\\d+) (?<client_ip>\\S+): (?<module>\\w+)/(?<function>.*)(?<arguments>\\(.*?\\))?$"
}
},
"value" : {
"pid" : { "kind" : "integer", "identifier" : true },
"client_ip" : { "kind" : "string", "identifier" : true },
"module" : { "kind" : "string" },
"function" : { "kind" : "string" }
},
"sample" : [
{
"line" : "2015/05/24 07:48:21 -05:00 767 10.206.22.17: xmlrpc/up2date.listChannels(1000011979,)"
},
{
"line" : "2015/05/24 07:48:22 -05:00 1377 10.184.37.105: xmlrpc/registration.welcome_message('lang: None',)"
},
{
"line" : "2015/05/24 07:48:22 -05:00 759 10.49.10.30: xmlrpc/registration.register_osad"
},
{
"line" : "2015/05/24 07:48:22 -05:00 759 10.49.10.30: rhnServer/server_certificate.valid('Server id ID-1000019942 not found in database',)"
}
]
}
}
29 changes: 29 additions & 0 deletions sssd_log.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
{
"sssd_log" : {
"title" : "SSSD log format",
"description" : "Log format used by the System Security Services Daemon",
"url" : "http://fedorahosted.org/sssd",
"regex" : {
"core" : {
"pattern" : "^\\((?<timestamp>\\w{3} \\w{3} ( \\d|\\d{2}) \\d{2}:\\d{2}:\\d{2} \\d{4})\\) \\[sssd\\] \\[(?<function>\\w+)\\] \\((?<debug_level>0x[0-9a-fA-F]{4})\\): (?<body>.*)$"
},
"module" : {
"pattern" : "^\\((?<timestamp>\\w{3} \\w{3} ( \\d|\\d{2}) \\d{2}:\\d{2}:\\d{2} \\d{4})\\) \\[sssd(?<module>\\[.*?\\])\\] \\[(?<function>\\w+)\\] \\((?<debug_level>0x[0-9a-fA-F]{4})\\): (?<body>.*)$"
}
},
"value" : {
"module" : { "kind" : "string" },
"function" : { "kind" : "string" },
"debug_level" : { "kind" : "string" },
"body" : { "kind" : "string" }
},
"sample" : [
{
"line" : "(Tue Mar 31 06:03:46 2015) [sssd[be[default]]] [sysdb_search_by_name] (0x0400): No such entry"
},
{
"line" : "(Tue Mar 31 05:58:38 2015) [sssd] [start_service] (0x0100): Queueing service LDAP for startup"
}
]
}
}
42 changes: 42 additions & 0 deletions vmauthd.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
{

"vmauthd_log" : {
"title" : "vmware vmauthd",
"description" : "vmware's vmauthd log format",
"url" : "",
"regex" : {
"std" : {
"pattern" : "^(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}Z) (?<system>\\w+)\\[(?<psid>\\d+)\\]: (?<subsystem>\\S+)\\| (?<level>\\w)(?<errornumber>\\d+): (?<body>.*)$"
}
},
"level-field" : "level",
"level" : {
"warning" : "W",
"error" : "E",
"info" : "I"
},
"value" : {
"system" : {
"kind" : "string",
"identifier" : true
},
"psid" : {
"kind" : "integer",
"identifier" : true
},
"subsystem" : {
"kind" : "string",
"identifier" : true
},
"errornumber" : {
"kind" : "integer",
"identifier" : true
}
},
"sample" : [
{
"line" : "2015-05-13T14:07:56Z vmauthd[22040702]: vthread-3| I120: PREF Failed to load user preferences."
}
]
}
}
Loading

0 comments on commit 93691c2

Please sign in to comment.