# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. blue_coat_real_media = { plugin_version = "1.0.1" # Initial creation - 1.0 # 2010-10-20 - 1.0.1 - MSG - Edited info lines. info.1.manufacturer = "Bluecoat" info.1.device = "RealMedia" info.1.version = "" # The name of the log format log.format.format_label = "Blue Coat RealMedia Log Format" log.miscellaneous.log_data_type = "http_access" log.miscellaneous.log_format_type = "media_server" log.format.ignore_format_lines = "T" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^ [0-9.]* - - \\[../.../....:..:..:...*\\] \"[A-Z]* [^ ]* [A-Z]*/[0-9.]*\" [0-9]* [-0-9]* \\[.*\\] \\[.*\\] \\[.*\\] [0-9]* [0-9]* [0-9]* [0-9]* [0-9]* \\[[0-9 ]*\\] \\[[^]]*\\]" # This regular expression is used to parse the log fields out of the log entry log.format.parsing_regular_expression = "^ ([0-9.]*) - - \\[(../.../....:..:..:..).*\\] \"([A-Z]*) ([^ ]*) ([A-Z]*/[0-9.]*)\" ([0-9]*) ([-0-9]*) \\[([^]]*)\\] \\[([^]]*)\\] \\[.*\\] [0-9]* [0-9]* ([0-9]*) ([0-9]*) ([0-9]*) \\[([0-9 ]*)\\] \\[[^]]*\\] ([0-9.]*) \\[([^]]*)\\] \\[([^]]*)\\]" # The format of dates and times in this log log.format.date_format = "dd/mmm/yyyy:hh:mm:ss" log.format.time_format = "dd/mmm/yyyy:hh:mm:ss" # Log fields log.fields = { hostname = { label = "$lang_stats.field_labels.hostname" type = "host" index = 0 subindex = 0 hierarchy_dividers = "." left_to_right = false leading_divider = "false" } # hostname date_time = { label = "$lang_stats.field_labels.date_time" type = "date_time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date_time operation = { label = "$lang_stats.field_labels.operation" type = "flat" index = 0 subindex = 0 } # operation page = { label = "$lang_stats.field_labels.page" type = "page" index = 0 subindex = 0 hierarchy_dividers = "/?" left_to_right = true leading_divider = "true" } # page protocol = { label = "$lang_stats.field_labels.protocol" type = "flat" index = 0 subindex = 0 } # protocol server_response = { label = "$lang_stats.field_labels.server_response" type = "response" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # server_response size = { label = "$lang_stats.field_labels.size" type = "size" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # size client_info = { label = "$lang_stats.field_labels.client_info" type = "flat" index = 0 subindex = 0 } # client_info client_guid = { label = "$lang_stats.field_labels.client_guid" type = "flat" index = 0 subindex = 0 } # client_guid sent_time = { label = "$lang_stats.field_labels.sent_time" type = "flat" index = 0 subindex = 0 } # sent_time resends = { label = "$lang_stats.field_labels.resends" type = "flat" index = 0 subindex = 0 } # resends failed_resends = { label = "$lang_stats.field_labels.failed_resends" type = "flat" index = 0 subindex = 0 } # failed_resends stream_components = { label = "$lang_stats.field_labels.stream_components" type = "flat" index = 0 subindex = 0 } # stream_components server_hostname = { label = "$lang_stats.field_labels.server_hostname" type = "flat" index = 0 subindex = 0 } # server_hostname cache_operation = { label = "$lang_stats.field_labels.cache_operation" type = "flat" index = 0 subindex = 0 } # cache_operation username = { label = "$lang_stats.field_labels.username" type = "flat" index = 0 subindex = 0 } # username } # log.fields # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day page = { label = "$lang_stats.field_labels.page" log_field = "page" type = "string" suppress_top = 1 suppress_bottom = 2 display_format_type = "page" } # page file_type = { label = "$lang_stats.field_labels.file_type" log_field = "file_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # file_type hostname = { label = "$lang_stats.field_labels.hostname" log_field = "hostname" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hostname" } # hostname domain_description = { label = "$lang_stats.field_labels.domain_description" log_field = "domain_description" type = "string" suppress_top = 0 suppress_bottom = 2 } # domain_description location = { label = "$lang_stats.field_labels.location" log_field = "location" type = "string" suppress_top = 0 suppress_bottom = 3 } # location protocol = { label = "$lang_stats.field_labels.protocol" log_field = "protocol" type = "string" suppress_top = 0 suppress_bottom = 2 } # protocol server_response = { label = "$lang_stats.field_labels.server_response" log_field = "server_response" type = "string" suppress_top = 0 suppress_bottom = 2 } # server_response server_hostname = { label = "$lang_stats.field_labels.server_hostname" log_field = "server_hostname" type = "string" suppress_top = 0 suppress_bottom = 2 } # server_hostname client_info = { label = "$lang_stats.field_labels.client_info" log_field = "client_info" type = "string" suppress_top = 0 suppress_bottom = 2 } # client_info client_guid = { label = "$lang_stats.field_labels.client_guid" log_field = "client_guid" type = "string" suppress_top = 0 suppress_bottom = 2 } # client_guid resends = { label = "$lang_stats.field_labels.resends" log_field = "resends" type = "string" suppress_top = 0 suppress_bottom = 2 } # resends failed_resends = { label = "$lang_stats.field_labels.failed_resends" log_field = "failed_resends" type = "string" suppress_top = 0 suppress_bottom = 2 } # failed_resends stream_components = { label = "$lang_stats.field_labels.stream_components" log_field = "stream_components" type = "string" suppress_top = 0 suppress_bottom = 2 } # stream_components cache_operation = { label = "$lang_stats.field_labels.cache_operation" log_field = "cache_operation" type = "string" suppress_top = 0 suppress_bottom = 2 } # cache_operation username = { label = "$lang_stats.field_labels.username" log_field = "username" type = "string" suppress_top = 0 suppress_bottom = 2 } # username } # database.fields # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'hits = 1;' } # mark_entry } # log.filters log.field_options = { sessions_page_field = "page" sessions_visitor_id_field = "hostname" sessions_event_field = "page_views" } # log.field_options database.numerical_fields = { hits = { label = "$lang_stats.field_labels.hits" default = false requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # hits page_views = { label = "$lang_stats.field_labels.page_views" default = true requires_log_field = false type = "int" display_format_type = "integer" } # page_views visitors = { label = "$lang_stats.field_labels.visitors" default = false requires_log_field = true log_field = "hostname" type = "unique" display_format_type = "integer" } # visitors size = { label = "$lang_stats.field_labels.size" default = false requires_log_field = true log_field = "size" type = "int" integer_bits = 64 display_format_type = "bandwidth" } # size } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true host_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" page = true file_type = true hostname = true domain_description = true location = true protocol = true server_response = true server_hostname = true client_info = true client_guid = true resends = true failed_resends = true stream_components = true cache_operation = true username = true } # report_groups } # create_profile_wizard_options not_supported = { } # not_supported } # blue_coat_real_media