- SYSLOG5424F5_NILVALUE \-
- SYSLOG5424F5_NONZERO_DIGIT [1-9]
- SYSLOG5424F5_DIGIT (?:0|%{SYSLOG5424F5_NONZERO_DIGIT})
- SYSLOG5424F5_PRINTUSASCII [\u0021-\u007e]
- SYSLOG5424F5_SP \u0020
- SYSLOG5424F5_BOM \u00ef\u00bb\u00bf
- SYSLOG5424F5_MSG_UTF8 %{SYSLOG5424F5_BOM}\p{Assigned}*
- SYSLOG5424F5_MSG_ANY \p{ASCII}*
- SYSLOG5424F5_MSG (?:%{SYSLOG5424F5_MSG_ANY}|%{SYSLOG5424F5_MSG_UTF8})
- SYSLOG5424F5_SD_NAME %{SYSLOG5424F5_PRINTUSASCII}{1,32}?
- SYSLOG5424F5_PARAM_VALUE \p{Assigned}*?
- SYSLOG5424F5_PARAM_NAME %{SYSLOG5424F5_SD_NAME}
- SYSLOG5424F5_SD_ID %{SYSLOG5424F5_SD_NAME}
- SYSLOG5424F5_SD_PARAM %{SYSLOG5424F5_PARAM_NAME}=\"%{SYSLOG5424F5_PARAM_VALUE}\\
- "
- SYSLOG5424F5_SD_PARAMS (?:%{SYSLOG5424F5_SP}%{SYSLOG5424F5_SD_PARAM})*?
- SYSLOG5424F5_SD_ELEMENT \[%{SYSLOG5424F5_SD_ID:syslog5424_sd_id}%{SYSLOG5424F5_\
- SD_PARAMS:syslog5424_sd_params}\]
- SYSLOG5424F5_STRUCTURED_DATA (%{SYSLOG5424F5_NILVALUE}|%{SYSLOG5424F5_SD_ELEMEN\
- T})
- SYSLOG5424F5_TIME_HOUR (?:[01][0-9]|2[0-3])
- SYSLOG5424F5_TIME_MINUTE [0-5][0-9]
- SYSLOG5424F5_TIME_SECOND [0-5][0-9]
- SYSLOG5424F5_TIME_SECFRAC (?:\.%{SYSLOG5424F5_DIGIT}{1,6}|)
- SYSLOG5424F5_TIME_NUMOFFSET (?:\+|\-)%{SYSLOG5424F5_TIME_HOUR:syslog5424_time_n\
- umoffset_hour}:%{SYSLOG5424F5_TIME_MINUTE:syslog5424_time_numoffset_minute}
- SYSLOG5424F5_TIME_OFFSET %{SYSLOG5424F5_TIME_NUMOFFSET:syslog5424_time_numoffse\
- t}
- SYSLOG5424F5_PARTIAL_TIME %{SYSLOG5424F5_TIME_HOUR:syslog5424_time_hour}:%{SYSL\
- OG5424F5_TIME_MINUTE:syslog5424_time_minute}:%{SYSLOG5424F5_TIME_SECOND:syslog5\
- 424_time_second}%{SYSLOG5424F5_TIME_SECFRAC:syslog5424_time_secfrac}
- SYSLOG5424F5_FULL_TIME %{SYSLOG5424F5_PARTIAL_TIME:syslog5424_partial_time}%{SY\
- SLOG5424F5_TIME_OFFSET}
- SYSLOG5424F5_DATE_MDAY (?:0[1-9]|[1-2][0-9]|3[01])
- SYSLOG5424F5_DATE_MONTH (?:0[1-9]|1[0-2])
- SYSLOG5424F5_DATE_FULLYEAR [0-9]{4}
- SYSLOG5424F5_FULL_DATE %{SYSLOG5424F5_DATE_FULLYEAR:syslog5424_full_year}\-%{SY\
- SLOG5424F5_DATE_MONTH:syslog5424_month}\-%{SYSLOG5424F5_DATE_MDAY:syslog5424_md\
- ay}
- SYSLOG5424F5_TIMESTAMP (?:%{SYSLOG5424F5_NILVALUE}|%{SYSLOG5424F5_FULL_DATE:sys\
- log5424_full_date}T%{SYSLOG5424F5_FULL_TIME:syslog5424_full_time})
- SYSLOG5424F5_MSG_ID (?:%{SYSLOG5424F5_NILVALUE}|%{SYSLOG5424F5_PRINTUSASCII}{1,\
- 32})
- SYSLOG5424F5_PROC_ID (?:%{SYSLOG5424F5_NILVALUE}|%{SYSLOG5424F5_PRINTUSASCII}{1\
- ,12})
- SYSLOG5424F5_APP_NAME (?:%{SYSLOG5424F5_NILVALUE}|%{SYSLOG5424F5_PRINTUSASCII}{\
- 1,48})
- SYSLOG5424F5_HOSTNAME (?:%{SYSLOG5424F5_NILVALUE}|%{SYSLOG5424F5_PRINTUSASCII}{\
- 1,255})
- SYSLOG5424F5_VERSION %{SYSLOG5424F5_NONZERO_DIGIT}%{SYSLOG5424F5_DIGIT}{0,2}
- SYSLOG5424F5_PRIVAL (?:[0-9]|[0-9][0-9]|1[0-8][0-9]|19[0-1])
- SYSLOG5424F5_PRI <%{SYSLOG5424F5_PRIVAL:syslog5424_prival}>
- SYSLOG5424F5_HEADER %{SYSLOG5424F5_PRI}%{SYSLOG5424F5_VERSION:syslog5424_versio\
- n}%{SYSLOG5424F5_SP}%{SYSLOG5424F5_TIMESTAMP:syslog5424_timestamp}%{SYSLOG5424F\
- 5_SP}%{SYSLOG5424F5_HOSTNAME:syslog5424_hostname}%{SYSLOG5424F5_SP}%{SYSLOG5424\
- F5_APP_NAME:syslog5424_app_name}%{SYSLOG5424F5_SP}%{SYSLOG5424F5_PROC_ID:syslog\
- 5424_proc_id}%{SYSLOG5424F5_SP}%{SYSLOG5424F5_MSG_ID:syslog5424_msg_id}
- SYSLOG5424F5_LINE %{SYSLOG5424F5_HEADER}%{SYSLOG5424F5_SP}%{SYSLOG5424F5_STRUCT\
- URED_DATA}(?: |)%{SYSLOG5424F5_MSG:syslog5424_msg}
SHARE
TWEET
RFC5424 logstash syslog pattern.
a guest
Sep 29th, 2014
3
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.
