You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
115 lines
2.6 KiB
115 lines
2.6 KiB
# transforms.conf
|
|
|
|
##############
|
|
# nmon metrics
|
|
##############
|
|
|
|
# host Meta overridden with 5th column
|
|
[nmon_metrics_csv_hostoverride]
|
|
DEST_KEY = MetaData:Host
|
|
REGEX = ^\d*,\"{0,1}[^\"\,]*\"{0,1},\"{0,1}[^\"\,]*\"{0,1}[^\"\,]*\"{0,1},\"{0,1}[^\"\,]*\"{0,1},\"{0,1}([^\"\,]*)\"{0,1}
|
|
FORMAT = host::$1
|
|
|
|
# Metrics sent over http - host
|
|
[nmon_metrics_http_host]
|
|
DEST_KEY = MetaData:Host
|
|
REGEX = hostname=\"([^\"]*)\"
|
|
FORMAT = host::$1
|
|
|
|
# Metrics sent over http - metric_name
|
|
[nmon_metrics_http_metric_name]
|
|
REGEX = metric_name=\"([^\"]*)\"
|
|
FORMAT = metric_name::$1
|
|
WRITE_META = true
|
|
|
|
[nmon_metrics_http_metric_value]
|
|
REGEX = _value=\"([\d|\.]*)\"
|
|
FORMAT = _value::$1
|
|
WRITE_META = true
|
|
|
|
# Metrics sent over http - dimensions
|
|
[nmon_metrics_http_dims]
|
|
REGEX = (dimension\_\w*)=\"([^\"]*)\"
|
|
FORMAT = $1::$2
|
|
WRITE_META = true
|
|
REPEAT_MATCH = true
|
|
|
|
# Metrics sent over http - OStype
|
|
[nmon_metrics_http_OStype]
|
|
REGEX = OStype=\"([^\"]*)\"
|
|
FORMAT = OStype::$1
|
|
WRITE_META = true
|
|
|
|
# Metrics sent over http - serialnum
|
|
[nmon_metrics_http_serialnum]
|
|
REGEX = serialnum=\"([^\"]*)\"
|
|
FORMAT = serialnum::$1
|
|
WRITE_META = true
|
|
|
|
###########
|
|
# nmon data
|
|
###########
|
|
|
|
# Host override based on event data form nmon_data sourcetype
|
|
|
|
[nmon_data_hostoverride]
|
|
DEST_KEY = MetaData:Host
|
|
REGEX = ^\"{0,1}[a-zA-Z0-9\_]+\"{0,1},\"{0,1}[a-zA-Z0-9\-\_\.]+\"{0,1},\"{0,1}([a-zA-Z0-9\-\_\.]+)\"{0,1},.+
|
|
FORMAT = host::$1
|
|
|
|
# nmon data as events sent over http - host indexed field
|
|
[nmon_data_http_host]
|
|
DEST_KEY = MetaData:Host
|
|
REGEX = hostname=\"([^\"]*)\"
|
|
FORMAT = host::$1
|
|
|
|
# nmon data as events sent over http - OStype indexed field
|
|
[nmon_data_http_OStype]
|
|
REGEX = \sOStype=\"([^\"]*)\"
|
|
WRITE_META = true
|
|
FORMAT = OStype::$1
|
|
DEFAULT_VALUE = NULL
|
|
|
|
# nmon data as events sent over http - type indexed field
|
|
[nmon_data_http_type]
|
|
REGEX = \stype=\"([^\"]*)\"
|
|
WRITE_META = true
|
|
FORMAT = type::$1
|
|
DEFAULT_VALUE = NULL
|
|
|
|
# nmon data as events sent over http - rewrite sourcetype
|
|
[nmon_data_http_sourcetype]
|
|
DEST_KEY = MetaData:Sourcetype
|
|
REGEX = .*
|
|
FORMAT = sourcetype::nmon_data
|
|
|
|
#############
|
|
# nmon config
|
|
#############
|
|
|
|
# Host override based on event data form nmon_config sourcetype
|
|
|
|
[nmon_config_hostoverride]
|
|
DEST_KEY = MetaData:Host
|
|
REGEX = CONFIG\,[a-zA-Z0-9\-\:\.]+\,([a-zA-Z0-9\-\_\.]+)\,[a-zA-Z0-9\-\_\.]+
|
|
FORMAT = host::$1
|
|
|
|
# nmon_config sent over http
|
|
|
|
[nmon_config_http_rewrite_host]
|
|
DEST_KEY = MetaData:Host
|
|
REGEX = host=\"{0,}([a-zA-Z0-9\-\_\.]+)\"{0,}
|
|
FORMAT = host::$1
|
|
|
|
# nmon_config source
|
|
[nmon_config_http_rewrite_source]
|
|
DEST_KEY = MetaData:Source
|
|
REGEX = .*
|
|
FORMAT = source::configdata:http
|
|
|
|
# nmon_config sourcetype
|
|
[nmon_config_http_rewrite_sourcetype]
|
|
DEST_KEY = MetaData:Sourcetype
|
|
REGEX = .*
|
|
FORMAT = sourcetype::nmon_config
|