You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Sunny Kumar (JIRA)" <ji...@apache.org> on 2016/06/01 17:43:59 UTC
[jira] [Updated] (METRON-194) Create Checkpoint Syslog parser
[ https://issues.apache.org/jira/browse/METRON-194?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sunny Kumar updated METRON-194:
-------------------------------
Description:
Parse checkpoint syslogs. The format is as below:
<133>xpand[22939]: admin localhost t +volatile:mrma:users:user:socbackup:role:radius-group-any t
--------------------------
{"source.type":"checkpointsyslog","original_string":"<133>xpand[22939]: admin localhost t +volatile:mrma:users:user:socbackup:role:radius-group-any t","processName":"xpand","processId":"22939","priority":"133","message":"admin localhost t +volatile:mrma:users:user:socbackup:role:radius-group-any t","timestamp":"1464801261607"}
###############
<86>cp_radius_helper_1: Non-local user 'socbackup' given role 'radius-group-any' (if that exists)
-------------------------
{"source.type":"checkpointsyslog","original_string":"<86>cp_radius_helper_1: Non-local user 'socbackup' given role 'radius-group-any' (if that exists)","processName":"cp_radius_helper_1","priority":"86","message":"Non-local user 'socbackup' given role 'radius-group-any' (if that exists)","timestamp":"1464801294564"}
was:Sample data will be placed here soon
> Create Checkpoint Syslog parser
> -------------------------------
>
> Key: METRON-194
> URL: https://issues.apache.org/jira/browse/METRON-194
> Project: Metron
> Issue Type: New Feature
> Reporter: Sunny Kumar
> Priority: Minor
> Original Estimate: 48h
> Remaining Estimate: 48h
>
> Parse checkpoint syslogs. The format is as below:
> <133>xpand[22939]: admin localhost t +volatile:mrma:users:user:socbackup:role:radius-group-any t
> --------------------------
> {"source.type":"checkpointsyslog","original_string":"<133>xpand[22939]: admin localhost t +volatile:mrma:users:user:socbackup:role:radius-group-any t","processName":"xpand","processId":"22939","priority":"133","message":"admin localhost t +volatile:mrma:users:user:socbackup:role:radius-group-any t","timestamp":"1464801261607"}
> ###############
> <86>cp_radius_helper_1: Non-local user 'socbackup' given role 'radius-group-any' (if that exists)
> -------------------------
> {"source.type":"checkpointsyslog","original_string":"<86>cp_radius_helper_1: Non-local user 'socbackup' given role 'radius-group-any' (if that exists)","processName":"cp_radius_helper_1","priority":"86","message":"Non-local user 'socbackup' given role 'radius-group-any' (if that exists)","timestamp":"1464801294564"}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)