# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. ironmail_csv = { # The name of the log format log.format.format_label = "Ironmail CSV Log Format" log.miscellaneous.log_data_type = "generic" log.miscellaneous.log_format_type = "mail_server" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^[0-9]+:[0-9]+:[0-9]+:[0-9]+ [0-9]+:[0-9]+:[0-9]+:" statistics.miscellaneous.entry_name = "messages" # The format of dates and times in this log log.format.date_format = "mmddyyyy" log.format.time_format = "hh:mm:ss" # All log field parsing will be done using the parsing filters log.format.parse_only_with_filters = "true" # Log fields log.fields = { date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time size = { label = "$lang_stats.field_labels.size" type = "size" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # size sender = { label = "$lang_stats.field_labels.sender" type = "hierarchical" index = 0 subindex = 0 hierarchy_dividers = "@" left_to_right = false leading_divider = "false" } # sender recipient = { label = "$lang_stats.field_labels.recipient" type = "hierarchical" index = 0 subindex = 0 hierarchy_dividers = "@" left_to_right = false leading_divider = "false" } # recipient } # log.fields # Log Parsing Filters log.parsing_filters = { # Parse from with size line 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^([0-9]+:[0-9]+:[0-9]+:)([0-9]+) ([0-9]+:[0-9]+:[0-9]+):Sending ]*)> size=([0-9]+)', '*KEY*,date,time,from,size')" } # 1 # Parse from w/o size line 2 = { label = "2" comment = "" value = "collect_fields_using_regexp('^([0-9]+:[0-9]+:[0-9]+:)([0-9]+) ([0-9]+:[0-9]+:[0-9]+):Sending ]*)>', '*KEY*,date,time,from')" } # 2 # Parse rcpt to line 3 = { label = "3" comment = "" value = "collect_fields_using_regexp('^([0-9]+:[0-9]+:[0-9]+:)([0-9]+) ([0-9]+:[0-9]+:[0-9]+):Sending ]*)>', '*KEY*,date,time,to')" } # 3 # Accept on rcpt to line 4 = { label = "4" comment = "" value = "accept_collected_entry_using_regexp('^([0-9]+:[0-9]+:[0-9]+:)[0-9]+ [0-9]+:[0-9]+:[0-9]+:Sending