# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. radware_load_balancing = { # RadwareLoadBalancing # The name of the log format log.format.format_label = "Radware Load Balancing (Using Syslog Server)" log.miscellaneous.log_data_type = "syslog_required" log.miscellaneous.log_format_type = "network_device" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = " [A-Z]*: [0-9-]* [0-9:]* [A-Z]* " # All log field parsing will be done using the parsing filters log.format.parse_only_with_filters = "true" # A log entry is called an event statistics.miscellaneous.entry_name = "events" # Log fields log.fields = { message = { label = "$lang_stats.field_labels.message" type = "flat" index = 0 subindex = 0 } # message remote_ip = { label = "$lang_stats.field_labels.remote_ip" type = "flat" index = 0 subindex = 0 } # remote_ip nexthoprouter = { label = "$lang_stats.field_labels.nexthoprouter" type = "flat" index = 0 subindex = 0 } # nexthoprouter interface = { label = "$lang_stats.field_labels.interface" type = "flat" index = 0 subindex = 0 } # interface nms = { label = "$lang_stats.field_labels.nms" type = "flat" index = 0 subindex = 0 } # nms } # log.fields # # Log Parsing Filters log.parsing_filters = { # Parse out priority and message 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('() [A-Z]+: [0-9-]* [0-9:]* ([A-Z]+) (.*)$', '*KEY*,priority,message')" } # 1 # Parse out remote IP NextHopRouter message 2 = { label = "2" comment = "" value = "collect_fields_using_regexp('() [A-Z]+: [0-9-]* [0-9:]* [A-Z]+ Remote IP ([a-z0-9.]+) NextHopRouter ([a-z0-9. ]+) ([A-Za-z ]*)$', '*KEY*,remote_ip,nexthoprouter,message')" } # 2 # Parse out NextHopRouter message 3 = { label = "3" comment = "" value = "collect_fields_using_regexp('() [A-Z]+: [0-9-]* [0-9:]* [A-Z]+ NextHopRouter ([a-z0-9. ]+) (.*)$', '*KEY*,nexthoprouter,message')" } # 3 # Parse out remote IP, NextHopRouter message 4 = { label = "4" comment = "" value = "collect_fields_using_regexp('() [A-Z]+: [0-9-]* [0-9:]* [A-Z]+ Remote ([a-z0-9.]+) NextHopRouter ([a-z0-9. ]+) ([A-Za-z ]+)$', '*KEY*,remote_ip,nexthoprouter,message')" } # 4 # Parse out message, Interface 5 = { label = "5" comment = "" value = "collect_fields_using_regexp('() [A-Z]+: [0-9-]* [0-9:]* [A-Z]+ (.*) .nterface ([a-z0-9. ]+)$', '*KEY*,message,interface')" } # 5 # Parse out message, NMS 6 = { label = "6" comment = "" value = "collect_fields_using_regexp('() [A-Z]+: [0-9-]* [0-9:]* [A-Z]+ (.* NMS) ([a-z0-9. ]+)$', '*KEY*,message,nms')" } # 6 # Accept this log entry 7 = { label = "7" comment = "" value = "accept_collected_entry_using_regexp('^()', false)" } # 7 } # log.parsing_filters # Database fields database.fields = { message = { label = "$lang_stats.field_labels.message" log_field = "message" type = "string" suppress_top = 0 suppress_bottom = 2 } # message remote_ip = { label = "$lang_stats.field_labels.remote_ip" log_field = "remote_ip" type = "string" suppress_top = 0 suppress_bottom = 2 } # remote_ip nexthoprouter = { label = "$lang_stats.field_labels.nexthoprouter" log_field = "nexthoprouter" type = "string" suppress_top = 0 suppress_bottom = 2 } # nexthoprouter interface = { label = "$lang_stats.field_labels.interface" log_field = "interface" type = "string" suppress_top = 0 suppress_bottom = 2 } # interface nms = { label = "$lang_stats.field_labels.nms" log_field = "nms" type = "string" suppress_top = 0 suppress_bottom = 2 } # nms } # database.fields database.numerical_fields = { events = { label = "$lang_stats.field_labels.events" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # events } # database.numerical_fields log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'events = 1;' } # mark_entry } # log.filters create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" message = true remote_ip = true nexthoprouter = true interface = true nms = true } # report_groups } # create_profile_wizard_options not_supported = { visitors = true sessions = true pageviews = true bandwidth = true } # not_supported } # radware_load_balancing