#Sourcetype pour export spectrum VTEST
[_json_spectrum_tic]
DATETIME_CONFIG =
INDEXED_EXTRACTIONS = json
KV_MODE = none
LINE_BREAKER = ([\r\n]+)
NO_BINARY_CHECK = true
category = Structured
description = Sourcetype pour les export spectrum
disabled = false
pulldown_type = true
TIME_PREFIX = Date.: .
EXTRACT-spectrum-device_name_interface = (?<Device_Name>.*)(_(?<Int_Name>[A-Za-z0-9/]{1,8}[0-9]))$ in Model_Name
EVAL-Device_Name = if(isnull(Device_Name),Model_Name,Device_Name)
EXTRACT-spectrum-ospf_neighbor = The neighbor router is (?<src_ip>[0-9\.]+), and the new state is (?<state_to>\S+)\. in Originating_event
EXTRACT-spectrum-source_system = Source System = (?<src_ip>[0-9\.]+) in Originating_event
EXTRACT-spectrum-vrrp_ip_address = IP address is (?<src_ip>[0-9\.]+) in Originating_event