created avamar.json

hagfelsh · Sep 10, 2018 · c5cf7e4 · c5cf7e4
1 parent eb976a1
commit c5cf7e4
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/avamar.json b/avamar.json
@@ -0,0 +1,23 @@
+{
+    "avamar_log" : {
+        "title": "Avamar appliance logs",
+        "description": "Log format found in avamar backup appliance. AKA VMware Data Protection.",
+        "url": "",
+        "regex": {
+            "std": {
+                "pattern": "^(?<timestamp>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) (?<level>\\w+)\\s+\\[(?<subsystem>\\S+)\\]-\\w+\\.(?<function>\\S+):( (?<reporter>.*):)? (?<body>.*)$"
+            }
+        },
+        "level-field": "level",
+        "value": {
+            "subsystem" : { "kind": "string",  "identifier": true },
+            "function"  : { "kind": "string", "identifier": true },
+            "reporter"  : { "kind": "string", "identifier": true }
+        },
+        "sample": [
+            {
+                "line": "2018-09-03 23:16:08,675 INFO  [VmwareFlrCLI-update]-services.BaseCLI$4: VmwareFlrCLI-update: State update complete. New state: running"
+            }
+        ]
+    }
+}