# Copyright (c) 2010 Flowerfire, Inc.  All Rights Reserved.
bomgar_box = {

  plugin_version = "1.0"

  info.1.manufacturer = "Bomgar"
  info.1.device = "Box"
  info.1.version.1 = "10"

  # 2007-12-10 - GMF - 1.0 - initial plug-in creation

  # The name of the log format
  log.format.format_label = "Bomgar Box Log Format"
  log.miscellaneous.log_data_type = "syslog_required"  
  log.miscellaneous.log_format_type = "firewall"

  # The log is in this format if any of the first ten lines match this regular expression
  # e.g. 2007-11-27 11:55:40     Local0.Notice   190.18.38.2   BG: 0973:01:01:site=demo.somewhere.com;who=Someone - Bob (bob);who_ip=190.18.38.10;event=downloaded_rep_client
  log.format.autodetect_regular_expression = "BG: [0-9][0-9][0-9][0-9]:[0-9][0-9]:[0-9][0-9]:"

  # Log fields
  log.fields = {

    site_id = ""
    segment_number = ""
    total_segments = ""

    site = ""
    who = ""
    who_ip = ""
    event = ""
    status = ""
    target = ""
    disabled = ""
    display_number = ""
    username = ""
    perm_admin = ""
    perm_view_reports = ""
    reason = ""
    
    display_name = ""
    password = ""
    reset_password = ""
    password_expiry = ""
    password_never_expires = ""
    security_question = ""
    security_answer = ""
    failed_login_attempts = ""
    account_expiry = ""
    comments = ""
    perm_edit_public_template = ""
    perm_edit_public_file_store = ""
    perm_edit_canned_messages = ""
    perm_edit_sd_teams = ""
    perm_change_display_name = ""
    perm_show_on_public_list = ""
    perm_sd_allowed = ""
    perm_sd_ss_control = ""
    perm_sd_reverse_connect = ""
    perm_sd_file_transfer = ""
    perm_sd_remote_shell = ""
    perm_sd_system_info = ""
    perm_sd_prompt_ss = ""
    perm_sd_prompt_file_transfer = ""
    perm_sd_prompt_remote_shell = ""
    perm_sd_prompt_system_info = ""
    perm_sd_ss_request = ""
    perm_sd_push = ""
    perm_sd_push_timeout = ""
    perm_pd_allowed = ""

    h_default_answer = ""
    created_date = "" 

    prompt_remote_shell = ""
 
   # Change new values
    new_failed_login_attempts = ""
    new_password_expiry = ""
    new_password = ""
    new_perm_change_display_name = ""
    new_perm_sd_push = ""
    new_password_never_expires = ""
 
    # Change events
    old_disabled = ""
    old_display_number = ""
    old_display_name = ""
    old_password = ""
    old_reset_password = ""
    old_password_expiry = ""
    old_password_never_expires = ""
    old_security_question = ""
    old_security_answer = ""
    old_failed_login_attempts = ""
    old_account_expiry = ""
    old_comments = ""
    old_username = ""
    old_perm_admin = ""
    old_perm_view_reports = ""
    old_perm_edit_public_template = ""
    old_perm_edit_public_file_store = ""
    old_perm_edit_canned_messages = ""
    old_perm_edit_sd_teams = ""
    old_perm_change_display_name = ""
    old_perm_show_on_public_list = ""
    old_perm_sd_allowed = ""
    old_perm_sd_ss_control = ""
    old_perm_sd_reverse_connect = ""
    old_perm_sd_file_transfer = ""
    old_perm_sd_remote_shell = ""
    old_perm_sd_system_info = ""
    old_perm_sd_prompt_ss = ""
    old_perm_sd_prompt_file_transfer = ""
    old_perm_sd_prompt_remote_shell = ""
    old_perm_sd_prompt_system_info = ""
    old_perm_sd_ss_request = ""
    old_perm_sd_push = ""
    old_perm_sd_push_timeout = ""
    old_perm_sd_push_default_answer = ""
    old_perm_pd_allowed = ""
    old_created_date = "" 
  
  } # log.fields


  #          
  # Log Parsing Filters
  log.parsing_filters.parse = `

# Strip off date/time header
if (matches_regular_expression(v.syslog_message, '^BG: ([0-9][0-9][0-9][0-9]):([0-9][0-9]):([0-9][0-9]):(.*)$')) then (

  set_collected_field('', 'site_id', $1);
  set_collected_field('', 'segment_number', $2);
  set_collected_field('', 'total_segments', $3);

  v.remainder = $4;
  collect_listed_fields('', v.remainder, ';', '=', '');

);
accept_collected_entry('', false);
`

  # Database fields
  database.fields = {

    site_id = ""
    segment_number = ""
    total_segments = ""

    site = ""
    who = ""
    who_ip = ""
    event = ""
    status = ""
    target = ""
    disabled = ""
    display_number = ""
    username = ""
    perm_admin = ""
    perm_view_reports = ""
    reason = ""
    
    display_name = ""
    password = ""
    reset_password = ""
    password_expiry = ""
    password_never_expires = ""
    security_question = ""
    security_answer = ""
    failed_login_attempts = ""
    account_expiry = ""
    comments = ""

    perm_edit_public_template = ""
    perm_edit_public_file_store = ""
    perm_edit_canned_messages = ""
    perm_edit_sd_teams = ""
    perm_change_display_name = ""
    perm_show_on_public_list = ""
    perm_sd_allowed = ""
    perm_sd_ss_control = ""
    perm_sd_reverse_connect = ""
    perm_sd_file_transfer = ""
    perm_sd_remote_shell = ""
    perm_sd_system_info = ""
    perm_sd_prompt_ss = ""
    perm_sd_prompt_file_transfer = ""
    perm_sd_prompt_remote_shell = ""
    perm_sd_prompt_system_info = ""
    perm_sd_ss_request = ""
    perm_sd_push = ""
    perm_sd_push_timeout = ""
    perm_pd_allowed = ""

    h_default_answer = ""
    created_date = "" 

    prompt_remote_shell = ""
 
   # Change new values
    new_failed_login_attempts = ""
    new_password_expiry = ""
    new_password = ""
    new_perm_change_display_name = ""
    new_perm_sd_push = ""
    new_password_never_expires = ""
 
    # Change events
    old_disabled = ""
    old_display_number = ""
    old_display_name = ""
    old_password = ""
    old_reset_password = ""
    old_password_expiry = ""
    old_password_never_expires = ""
    old_security_question = ""
    old_security_answer = ""
    old_failed_login_attempts = ""
    old_account_expiry = ""
    old_comments = ""
    old_username = ""
    old_perm_admin = ""
    old_perm_view_reports = ""
    old_perm_edit_public_template = ""
    old_perm_edit_public_file_store = ""
    old_perm_edit_canned_messages = ""
    old_perm_edit_sd_teams = ""
    old_perm_change_display_name = ""
    old_perm_show_on_public_list = ""
    old_perm_sd_allowed = ""
    old_perm_sd_ss_control = ""
    old_perm_sd_reverse_connect = ""
    old_perm_sd_file_transfer = ""
    old_perm_sd_remote_shell = ""
    old_perm_sd_system_info = ""
    old_perm_sd_prompt_ss = ""
    old_perm_sd_prompt_file_transfer = ""
    old_perm_sd_prompt_remote_shell = ""
    old_perm_sd_prompt_system_info = ""
    old_perm_sd_ss_request = ""
    old_perm_sd_push = ""
    old_perm_sd_push_timeout = ""
    old_perm_sd_push_default_answer = ""
    old_perm_pd_allowed = ""
    old_created_date = "" 

  } # database.fields


  # Log Filters
  log.filters = {

    mark_entry = {
      label = '$lang_admin.log_filters.mark_entry_label'
      comment = '$lang_admin.log_filters.mark_entry_comment'
      value = 'events = 1;'
    } # mark_entry

#    unique_ips = {
#      default = true
#      log_field = "who_ip"
#      type = "unique"
#    } # unique_ips

  } # log.filters

  database.numerical_fields = {

    events = {
      label = "$lang_stats.field_labels.events"
      default = true
      requires_log_field = false
      type = "int"
      display_format_type = "integer"
      entries_field = true
    } # events

  } # database.numerical_fields


  create_profile_wizard_options = {

    # How the reports should be grouped in the report menu
    report_groups = {

      overview.type = "overview"

      date_time_group = {
        date_time = ""
        days = ""
        day_of_week = ""
        hour_of_day = ""
      } # date_time_group

      main_group = {
    site_id = ""
    segment_number = ""
    total_segments = ""

    site = ""
    who = ""
    who_ip = ""
    event = ""
    status = ""
    target = ""
    disabled = ""
    display_number = ""
    username = ""
    reason = ""
    
    display_name = ""
      }

      security_group = {
    password = ""
    reset_password = ""
    password_expiry = ""
    password_never_expires = ""
    security_question = ""
    security_answer = ""
    failed_login_attempts = ""
    account_expiry = ""
    comments = ""
      }

      permissions_group = {
    perm_admin = ""
    perm_view_reports = ""
    perm_edit_public_template = ""
    perm_edit_public_file_store = ""
    perm_edit_canned_messages = ""
    perm_edit_sd_teams = ""
    perm_change_display_name = ""
    perm_show_on_public_list = ""
    perm_sd_allowed = ""
    perm_sd_ss_control = ""
    perm_sd_reverse_connect = ""
    perm_sd_file_transfer = ""
    perm_sd_remote_shell = ""
    perm_sd_system_info = ""
    perm_sd_prompt_ss = ""
    perm_sd_prompt_file_transfer = ""
    perm_sd_prompt_remote_shell = ""
    perm_sd_prompt_system_info = ""
    perm_sd_ss_request = ""
    perm_sd_push = ""
    perm_sd_push_timeout = ""
    perm_pd_allowed = ""
      } # permissions_group

      changes_group = {
    old_disabled = ""
    old_display_number = ""
    old_display_name = ""
    old_password = ""
    old_reset_password = ""
    old_password_expiry = ""
    old_password_never_expires = ""
    old_security_question = ""
    old_security_answer = ""
    old_failed_login_attempts = ""
    old_account_expiry = ""
    old_comments = ""
    old_username = ""
    old_perm_admin = ""
    old_perm_view_reports = ""
    old_perm_edit_public_template = ""
    old_perm_edit_public_file_store = ""
    old_perm_edit_canned_messages = ""
    old_perm_edit_sd_teams = ""
    old_perm_change_display_name = ""
    old_perm_show_on_public_list = ""
    old_perm_sd_allowed = ""
    old_perm_sd_ss_control = ""
    old_perm_sd_reverse_connect = ""
    old_perm_sd_file_transfer = ""
    old_perm_sd_remote_shell = ""
    old_perm_sd_system_info = ""
    old_perm_sd_prompt_ss = ""
    old_perm_sd_prompt_file_transfer = ""
    old_perm_sd_prompt_remote_shell = ""
    old_perm_sd_prompt_system_info = ""
    old_perm_sd_ss_request = ""
    old_perm_sd_push = ""
    old_perm_sd_push_timeout = ""
    old_perm_sd_push_default_answer = ""
    old_perm_pd_allowed = ""
    old_created_date = "" 

    new_failed_login_attempts = ""
    new_password_expiry = ""
    new_password = ""
    new_perm_change_display_name = ""
    new_perm_sd_push = ""
    new_password_never_expires = ""
      }

      other_group = {
    h_default_answer = ""
    created_date = "" 

    prompt_remote_shell = ""
 
      }

    } # report_groups

  } # create_profile_wizard_options

} # bomgar_box