# Copyright (c) 2010 Flowerfire, Inc.  All Rights Reserved.
windows_dhcp = {

  # 2012-10-06 - 1.0 - GMF - Initial creation

  info.1.manufacturer = "Microsoft"
  info.1.device = "Windows DHCP Server"
  info.1.version.1 = ""

  # The name of the log format
  log.format.format_label = "Microsoft Windows DHCP Server Log Format"
  log.miscellaneous.log_data_type = "network"
  log.miscellaneous.log_format_type = "network_device"

  # The log is in this format if any of the first ten lines match this regular expression
  log.format.autodetect_regular_expression = "^DHCP Server version [0-9.]+$"

  # All log field parsing will be done using the parsing filters
  log.format.parse_only_with_filters = "true"

  # Log fields
  log.fields = {

#    date = ""
#    time = ""

    ip_address = ""
    subnetmask = ""
    client_hardware_address = ""
    name = ""
    comment = ""
    type = ""
    expires = ""
    owner_host_ip_address = ""
    owner_host_netbios_name = ""
    owner_host_name = ""

    events = ""

  } # log.fields


  #          
  # Log Parsing Filters
  log.parsing_filters = {

    parse = `
if (matches_regular_expression(current_log_line(), '^	([^=]+) = (.*[^.]).?$')) then (
  v.fieldname = lowercase(replace_all($1, ' ', '_'));
  v.fieldvalue = $2;
  set_collected_field('', v.fieldname, v.fieldvalue);

  # Extract date/time from Expires
#  if (v.fieldname eq 'expires') then (
#    if (matches_regular_expression(v.fieldvalue, '^([0-9/]+) ([0-9:]+)$')) then (
#      set_collected_field('', 'date', $1);
#      set_collected_field('', 'time', $2);
#    );
#  );

  # Accept on "Owner Host Name"
  if (v.fieldname eq 'owner_host_name') then (
    set_collected_field('', 'events', 1);
    accept_collected_entry('', false);
  );

);
`

  } # log.parsing_filters


  # Database fields
  database.fields = {

#    date_time = ""
#    hour_of_day = ""
#    day_of_week = ""

    ip_address = ""
    subnetmask = ""
    client_hardware_address = ""
    name = ""
    comment = ""
    type = ""
#    expires = ""
    owner_host_ip_address = ""
    owner_host_netbios_name = ""
    owner_host_name = ""

  } # database.fields

  database.numerical_fields = {

    events = {
      default = true
      entries_field = true
    } # events

  } # database.numerical_fields


  create_profile_wizard_options = {

    # How the reports should be grouped in the report menu
    report_groups = {
      date_time_group = ""
    } # report_groups

  } # create_profile_wizard_options

} # windows_dhcp