# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. bind_response_checks = { plugin_version = "1.0.1" # Initial creation - 1.0 # 2010-10-13 - 1.0.1 - MSG - Edited info lines. info.1.manufacturer = "ISC" info.1.device = "Bind Response Checks" info.1.version.1 = "9.3.0" # The name of the log format log.format.format_label = "Bind Response Checks Log Format" log.miscellaneous.log_data_type = "generic" log.miscellaneous.log_format_type = "network_device" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^(bad referral |Malformed response from |unrelated additional info |invalid RR type |unrelated additional info )" # Log fields log.fields = { error_type = { label = "$lang_stats.field_labels.error_type" type = "flat" index = 0 subindex = 0 } # error_type error_parameter = { label = "$lang_stats.field_labels.error_parameter" type = "flat" index = 0 subindex = 0 } # error_parameter source_host = { label = "$lang_stats.field_labels.source_host" type = "host" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # source_host } # log.fields # # Log Parsing Filters log.parsing_filters = { # Parse bad referral lines 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^()(bad referral) (.*)$', '*key,error_type,error_parameter')" } # 1 # Parse the Malformed response lines 2 = { label = "2" comment = "" value = "collect_fields_using_regexp('^()(Malformed response) from \\\\[([0-9.]*)\\\\]\\\\.[0-9]* \\\\((.*)\\\\)$', '*key,error_type,source_host,error_parameter')" } # 2 # Parse the unrelated additional info lines 3 = { label = "3" comment = "" value = "collect_fields_using_regexp('^()(unrelated additional info) (.*)', '*key,error_type,error_parameter')" } # 3 # Parse the invalid RR type lines 4 = { label = "4" comment = "" value = "collect_fields_using_regexp('^()(invalid RR type ..*. in .* section) \\\\((.*)\\\\) from .([0-9.]*).\\\\.', '*key,error_type,error_parameter,source_host')" } # 4 # Parse the wrong ans. lines 5 = { label = "5" comment = "" value = "collect_fields_using_regexp('^()(wrong ans\\\\. name) \\\\(.*\\\\)', '*key,error_type,error_parameter')" } # 5 # Accept this log entry 6 = { label = "6" comment = "" value = "accept_collected_entry_using_regexp('^()', false)" } # 6 } # log.parsing_filters # Database fields database.fields = { error_type = { label = "$lang_stats.field_labels.error_type" log_field = "error_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # error_type error_parameter = { label = "$lang_stats.field_labels.error_parameter" log_field = "error_parameter" type = "string" suppress_top = 0 suppress_bottom = 2 } # error_parameter source_host = { label = "$lang_stats.field_labels.source_host" log_field = "source_host" type = "string" suppress_top = 0 suppress_bottom = 2 } # source_host } # database.fields # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'hits = 1;' } # mark_entry } # log.filters database.numerical_fields = { hits = { label = "$lang_stats.field_labels.hits" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # hits visitors = { label = "$lang_stats.field_labels.visitors" default = false requires_log_field = true log_field = "source_host" type = "unique" display_format_type = "integer" } # visitors } # database.numerical_fields create_profile_wizard_options = { host_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" error_type = true error_parameter = true source_host = true } # report_groups } # create_profile_wizard_options not_supported = { daybyday = true bandwidth = true sessions = true pageviews = true } # not_supported } # bind_response_checks