# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. peoplesoft_appserver = { plugin_version = "1.1" # 2006-04-14: 1.0: Initial plug-in -GMF # 2011-07-11 - 1.0.1 - MSG - Edited info lines. # 2012-07-02 - 1.1 - MSG - Added a Message field and a Stream ID field for new variant. info.1.manufacturer = "PeopleSoft" info.1.device = "AppServer" info.1.version.1 = "" # The name of the log format log.format.format_label = "PeopleSoft AppServer Log Format" log.miscellaneous.log_data_type = "web_server" log.miscellaneous.log_format_type = "web_server" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^[A-Z]+\\.[0-9]+ \\([0-9]+\\) \\[[0-9][0-9]/[0-9][0-9]/[0-9][0-9] [0-9][0-9]:[0-9][0-9]:[0-9][0-9] " log.format.date_format = "mm/dd/yy" log.fields = { event_type = "" date = "" time = "" operation = "" id = "" lang = "" token = "" identifier = "" email_address = "" browser = "" message = "" stream_id = "" events = "" } # log.fields log.parsing_filters.parse = ` if (matches_regular_expression(current_log_line(), "^([A-Z]+)\\\\.[0-9]+ \\\\([0-9]+\\\\) \\\\[([0-9/]+) ([0-9:]+) ([^]]+)\\\\]\\\\([0-9]+\\\\) (.*)$")) then ( event_type = $1; date = $2; time = $3; operation = $4; v.remainder = $5; if (matches_regular_expression(operation, '^([^ ]+) ([^ ]*)$')) then ( email_address = $1; operation = $2; ); else if (matches_regular_expression(operation, '^([^ ]+) \\\\(([^)]*)\\\\) ([^ ]*)$')) then ( email_address = $1; browser = $2; operation = $3; ); if (matches_regular_expression(v.remainder, "^Returning context. ID=([^,]+), Lang=([^,]+), Token=([^ ]+) ?(.*)$")) then ( id = $1; lang = $2; token = $3; identifier = $4; ); else if (matches_regular_expression(v.remainder, "^Returning context. ID=([^,]+), Lang=([^,]+), UStreamId=([^,]+), Token=([^ ]+) ?(.*)$")) then ( id = $1; lang = $2; stream_id = $3; token = $4; identifier = $5; ); else message = v.remainder; events = 1; ); ` database.fields = { date_time = "" day_of_week = "" hour_of_day = "" event_type = "" operation = "" id = "" lang = "" token = "" identifier = "" email_address = "" browser = "" message = "" stream_id = "" } # database.fields database.numerical_fields = { events = { default = true entries_field = true } # events } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" } # report_groups } # create_profile_wizard_options } # peoplesoft_appserver