You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
11 lines
362 B
11 lines
362 B
#Sourcetype pour sbc
|
|
[sbc]
|
|
SHOULD_LINEMERGE=false
|
|
KV_MODE = none
|
|
EXTRACT-sbc-generic = (?<device_time>\w+\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}) (?<reported_hostname>\S+)(-[0-9]+)? .* (?<sequence>\[S=\d*]) (?<ID>\[[S,B]ID=.*]) \s*(?<message_text>.*)
|
|
description = Sourcetype pour sbc equipements
|
|
|
|
[syslog]
|
|
TRANSFORMS-sourcetype-sbc = force_sourcetype_for_sbc
|
|
|