Field	Action	Value
@message		{
    "@source": "file://ns1.mydomain.com/var/log/named/query.log",
    "@type": "bind",
    "@tags": [],
    "@fields": {},
    "@timestamp": "2012-10-03T03:48:37.328000Z",
    "@source_host": "ns1.mydomain.com",
    "@source_path": "/var/log/named/query.log",
    "@message": "02-Oct-2012 20:48:37.210 client 10.0.2.32#1940: view internal: query: passive-checks.sh IN NS +"
}
@source		tcp://0.0.0.0:3333/client/10.0.2.7:56414
@source_host		0.0.0.0
@source_path		/client/10.0.2.7:56414
@tags		_grokparsefailure
@timestamp		2012-10-03T03:48:37.561000Z
@type		syslog