# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. metavante = { # Format log_file_format {value} log.format.format_label = "Metavante Log Format" log.miscellaneous.log_data_type = "network" log.format.treat_brackets_as_quotes = "false" log.format.date_format = "mm/dd/yy" log.format.time_format = "hh:mm:ss" log.format.autodetect_regular_expression = "ERROR +LTERM +NUMBER +EMPLOYEE NAME" log.format.parse_only_with_filters = "true" # Log fields log.fields = { user_id_error = { label = "user ID/error" } # user_id_error lterm = { label = "lterm" } # lterm terminal = "" username = "" date = "" time = "" condition_code = { label = "condition code" } # condition_code condition_description = { label = "condition description" } # condition_description } # log.fields # Log Parsing Filters log.parsing_filters = { # Parse out the service,date,time,event type,thread id,message 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^()([^ ]+) *([^ ]+) *([^ ]+) *(.{25}) ([0-9/]+) *([0-9:]+)\\\\.[0-9] *([^ ]+) *([^$]+)$', '*KEY*,user_id_error,lterm,terminal,username,date,time,condition_code,condition_description')" } # 1 # Accept a collected field on every line 2 = { label = "2" comment = "" value = "accept_collected_entry_using_regexp('()', false)" } # 2 } # log.parsing_filters # Database fields database.fields = { date_time = "" day_of_week = "" hour_of_day = "" user_id_error = "" lterm = "" terminal = "" username = "" condition_code = "" condition_description = "" } # database.fields # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'events = 1;' } # mark_entry } # log.filters database.numerical_fields = { events = { label = "$lang_stats.field_labels.events" events = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # events } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" } # report_groups } # create_profile_wizard_options } # metavante