beta_barrier_group = {

  plugin_version = "1.0beta"

  # The name of the log format
  log.format.format_label = "Barrier Group Log Format (BETA)"
  log.miscellaneous.log_data_type = "firewall"  
  log.miscellaneous.log_format_type = "firewall"

  # The log is in this format if any of the first ten lines match this regular expression
  log.format.autodetect_regular_expression = "^Source,Priority,Detected By,Description,Event Date/Time,Event Protocol,Source IP,Source Port,Source URL,Source MAC,Internal Source"

  log.format.field_separator = ","  
  log.format.ignore_format_lines = "true"

  # Log fields
  log.fields = {

    source.index = 1
    priority.index = 2
    detected_by.index = 3
    description.index = 4
    event_date_time.index = 5
    event_protocol.index = 6
    source_ip = {
      type = "host"
      index = 7;
    }
    source_port.index = 8
    source_url.index = 9
    source_mac.index = 10
    internal_source.index = 11
    blocked_source.index = 12
    dest_ip.index = 13
    dest_port.index = 14
    dest_url.index = 15
    dest_mac.index = 16
    internal_dest.index = 17
    blocked_dest.index = 18
    good_host.index = 19
    bad_host.index = 20

    date = ""
    time = ""

    events = ""
  
  } # log.fields


log.parsing_filters.parse = `
if (matches_regular_expression(event_date_time, '^([0-9/]+) ([0-9:]+)')) then (
  date = $1;
  time = $2;
);
events = 1;
`


  # Database fields
  database.fields = {

    date_time = ""
    day_of_week = ""
    hour_of_day = ""

    source = ""
    priority = ""
    detected_by = ""
    description = ""
    event_protocol = ""
    source_ip = ""
    location = ""
    source_port = ""
    source_url = ""
    source_mac = ""
    internal_source = ""
    blocked_source = ""
    dest_ip = ""
    dest_port = ""
    dest_url = ""
    dest_mac = ""
    internal_dest = ""
    blocked_dest = ""
    good_host = ""
    bad_host = ""

  } # database.fields


  database.numerical_fields = {

    events.default = true

  } # database.numerical_fields


  create_profile_wizard_options = {

    # How the reports should be grouped in the report menu
    report_groups = {
      date_time_group = ""
    } # report_groups

  } # create_profile_wizard_options

} # beta_barrier_group