# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. bulletproof_g6_ftpsessions = { # 2010-10-01 - 1.0.1 - MSG - Edited info lines. \ info.1.manufacturer = "Bulletproof" info.1.device = "FTP Sessions" info.1.version.1 = "" info.2.manufacturer = "Gene6" info.2.device = "G6 FTP Sessions" info.2.version = "" # The name of the log format log.format.format_label = "Bulletproof/G6 FTP Sessions Log Format" log.miscellaneous.log_data_type = "ftp" log.miscellaneous.log_format_type = "ftp_server" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^\\[[^ ]+ [^ ]+ [0-9]+/[0-9]/[0-9][0-9] [0-9]+:[0-9][0-9]:[0-9][0-9] [AP]M - [0-9]+/[0-9]+/[0-9][0-9] [0-9]+:[0-9][0-9]:[0-9][0-9] [AP]M\\]$" # The format of dates and times in this log log.format.date_format = "m/d/yy" log.format.time_format = "h:mm:ss AM/PM" # All log field parsing will be done using the parsing filters log.format.parse_only_with_filters = "true" # Log fields log.fields = { date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time direction = { label = "$lang_stats.field_labels.direction" type = "flat" index = 0 subindex = 0 } # direction username = { label = "$lang_stats.field_labels.username" type = "flat" index = 0 subindex = 0 } # username file = { label = "$lang_stats.field_labels.file" type = "page" index = 0 subindex = 0 hierarchy_dividers = "/?" left_to_right = true leading_divider = "true" } # file size = { label = "$lang_stats.field_labels.size" type = "size" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # size } # log.fields # # Log Parsing Filters log.parsing_filters = { # Process the session header lines 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^()\\\\[([^ ]*) [^ ]* ([0-9]+/[0-9]+/[0-9][0-9]) ([0-9]+:[0-9][0-9]:[0-9][0-9] [AP]M)', '*KEY*,username,date,time')" } # 1 # Process the download lines 2 = { label = "2" comment = "" value = "collect_fields_using_regexp('^() ([DU]L)[0-9]+=([^|]*)\\\\|*\\\\([0-9][0-9]:[0-9][0-9]:[0-9][0-9] - ([0-9.]*) KB', '*KEY*,direction,file,size')" } # 2 # Accept the log entry when we see a download line 3 = { label = "3" comment = "" value = "accept_collected_entry_using_regexp('^() [DU]L[0-9]+', false)" } # 3 } # log.parsing_filters # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day direction = { label = "$lang_stats.field_labels.direction" log_field = "direction" type = "string" suppress_top = 0 suppress_bottom = 2 } # direction username = { label = "$lang_stats.field_labels.username" log_field = "username" type = "string" suppress_top = 0 suppress_bottom = 2 } # username file = { label = "$lang_stats.field_labels.file" log_field = "file" type = "string" suppress_top = 0 suppress_bottom = 9 } # file file_type = { label = "$lang_stats.field_labels.file_type" log_field = "file_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # file_type } # database.fields # Log Filters log.filters = { not_authenticated = { label = "$lang_admin.log_filters.not_authenticated_label" comment = "$lang_admin.log_filters.not_authenticated_comment" value = "if (authenticated_user eq '-') then authenticated_user = '(not authenticated)';" } # not_authenticated # This filter deletes the . characters in the size field, to (roughly) convert KB to bytes 1 = { label = "1" comment = "" value = "size = replace_all(size, '.', '');" } # 1 # This filter converts \ to / in the file field 2 = { label = "2" comment = "" value = "file = replace_all(file, '\\\\', '/');" } # 2 mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'hits = 1;' } # mark_entry } # log.filters database.numerical_fields = { hits = { label = "$lang_stats.field_labels.hits" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # hits size = { label = "$lang_stats.field_labels.size" default = false requires_log_field = true log_field = "size" type = "float" display_format_type = "bandwidth" } # size } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" direction = true username = true file = true file_type = true } # report_groups } # create_profile_wizard_options not_supported = { pageviews = true visitors = true sessions = true individualhosts = true } # not_supported } # bulletproof_g6_ftpsessions