Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- props.conf:
- [access_combined]
- pulldown_type = true
- maxDist = 28
- MAX_TIMESTAMP_LOOKAHEAD = 128
- REPORT-access = access-extractions, access2-extractions
- SHOULD_LINEMERGE = False
- TIME_PREFIX =
- transforms.conf:
- [access2-extractions]
- # matches access-common or access-combined apache logging formats
- # Extracts: clientip, clientport, ident, user, req_time, method, uri, root, file, uri_domain, uri_query, version, status, bytes, referer_url, referer_domain, referer_proto, useragent, cookie, other (remaining chars)
- # Note: referer is misspelled in purpose because that is the "official" spelling for "HTTP referer"
- REGEX = ^[[nspaces:clientip]]\s++[[nspaces:ident]]\s++[[nspaces:user]]\s++[[nspaces:req_time]]\s++[[access-request]]\s++[[nspaces:status]]\s++[[nspaces:bytes]](?:\s++"(?<referer>[[bc_domain:referer_]]?+[^"]*+)"(?:\s++[[qstring:useragent]](?:\s++[[qstring:cookie]])?+)?+)?[[all:other]]
- [access-extractions]
- # matches access-common or access-combined apache logging formats
- # Extracts: clientip, clientport, ident, user, req_time, method, uri, root, file, uri_domain, uri_query, version, status, bytes, referer_url, referer_domain, referer_proto, useragent, cookie, other (remaining chars)
- # Note: referer is misspelled in purpose because that is the "official" spelling for "HTTP referer"
- REGEX = ^[[nspaces:clientip]]\s++[[nspaces:ident]]\s++[[nspaces:user]]\s++[[sbstring:req_time]]\s++[[access-request]]\s++[[nspaces:status]]\s++[[nspaces:bytes]](?:\s++"(?<referer>[[bc_domain:referer_]]?+[^"]*+)"(?:\s++[[qstring:useragent]](?:\s++[[qstring:cookie]])?+)?+)?[[all:other]]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement