# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. piolink_network_loadbalance = { plugin_version = "1.0.1" # 2006-08-18 - GMF - 1.0beta - initial implementation. # 2007-09-14 - 1.0 - KBB - renumbered per new beta policy # 2011-07-11 - 1.0.1 - MSG - Edited info lines. info.1.manufacturer = "Piolink" info.1.device = "Network Loadbalance" info.1.version.1 = "" # The name of the log format log.format.format_label = "Piolink Network Loadbalance Log Format" log.miscellaneous.log_data_type = "syslog_required" log.miscellaneous.log_format_type = "network_device" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "keepnlb: " # Log fields log.fields = { daemon = "" type = "" ip_address = "" mac_address = "" full_message = "" } # log.fields # Log Parsing Filters log.parsing_filters.parse = ` set_collected_field('', 'type', 'other'); if (matches_regular_expression(v.syslog_message, "^([^: ]+): (.*)$")) then ( v.daemon = $1; set_collected_field('', 'daemon', v.daemon); set_collected_field('', 'full_message', $2); v.remainder = $2; if (v.daemon eq "keepnlb") then ( if (matches_regular_expression(v.remainder, '^\\\\[[^]]+\\\\] (.*)$')) then ( v.remainder = $1; ); if (matches_regular_expression(v.remainder, '^: ICMP line health check to ([0-9.]+)\\\\(([0-9a-f:]+)\\\\) Failed')) then ( set_collected_field('', 'type', 'ICMP line health check failed'); set_collected_field('', 'ip_address', $1); set_collected_field('', 'mac_address', $2); ); else if (matches_regular_expression(v.remainder, '^(Fail to get gateway mac address) for ([0-9.]+)\\\\. ')) then ( set_collected_field('', 'type', $1); set_collected_field('', 'ip_address', $2); ); ); ); else ( set_collected_field('', 'full_message', v.syslog_message); ); set_collected_field('', 'events', 1); accept_collected_entry('', false); ` # Database fields database.fields = { daemon = "" type = "" ip_address = "" mac_address = "" full_message = "" } # database.fields database.numerical_fields = { events = { default = true requires_log_field = false entries_field = true } } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" } # report_groups } # create_profile_wizard_options } # piolink_network_loadbalance