# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. f5_load_balancer = { plugin_version = "1.0.1" info.1.manufacturer = "F5" info.1.device = "Load Balancer" info.1.version.1 = "" # 2008-11-04 - 1.0 - GMF - Initial implementation # 2008-12-16 - 1.0.1 - GMF - Enhanced autodetection to allow IPs in hostname field # The name of the log format log.format.format_label = "F5 Load Balancer" log.miscellaneous.log_data_type = "syslog_required" log.miscellaneous.log_format_type = "network_device" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "[a-z0-9.]+ [a-z]+[[][0-9]+[]]: [0-9a-f]{8}:[0-9]: " # Log fields log.fields = { device = "" process = "" pid = "" id = "" message = "" events = "" } # log.fields log.parsing_filters.parse = ` # 2008-08-18 18:53:32 Local0.Error 192.168.1.245 Aug 18 18:59:27 hinet mcpd[1000]: 01070640:3: Node 12.34.56.78 monitor status down. if (matches_regular_expression(v.syslog_message, "^[A-Z][a-z][a-z] [0-9]+ [0-9][0-9]:[0-9][0-9]:[0-9][0-9] ([a-z0-9.]+) ([a-z]+)[[]([0-9]+)[]]: ([0-9a-f]{8}:[0-9]): (.*)$")) then ( set_collected_field('', 'device', $1); set_collected_field('', 'process', $2); set_collected_field('', 'pid', $3); set_collected_field('', 'id', $4); set_collected_field('', 'message', $5); set_collected_field('', 'events', 1); accept_collected_entry('', false); ); ` # Database fields database.fields = { device = "" process = "" pid = "" id = "" message = "" } # database.fields # Log Filters log.filters = { } # log.filters database.numerical_fields = { events = { default = true entries_field = true } # events } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" } # report_groups } # create_profile_wizard_options } # f5_load_balancer