# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. radius_accounting_ii = { plugin_version = "1.0.1" # Initial creation - 1.0 # 2011-07-13 - 1.0.1 - MSG - Edited info lines. info.1.manufacturer = "Livingston" info.1.device = "Radius Accounting II" info.1.version.1 = "" # The name of the log format log.format.format_label = "Radius Accounting Log Format II" log.miscellaneous.log_data_type = "firewall" log.miscellaneous.log_format_type = "network_device" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^[A-Z][a-z][a-z]-[0-9]+-[0-9]+ [0-9]+:[0-9]+:[0-9]+ Radius accounting (start|stop) record for" # The format of dates and times in this log log.format.date_format = "mmm/dd/yyyy" log.format.time_format = "hh:mm:ss" # All log field parsing will be done using the parsing filters log.format.parse_only_with_filters = "true" # Log fields log.fields = { date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time record_type = { label = "$lang_stats.field_labels.record_type" type = "flat" index = 0 subindex = 0 } # record_type user = { label = "$lang_stats.field_labels.user" type = "flat" index = 0 subindex = 0 } # user source_ip = { label = "$lang_stats.field_labels.source_ip" type = "flat" index = 0 subindex = 0 } # source_ip framed_protocol_7_ = { label = "$lang_stats.field_labels.framed_protocol_7_" type = "flat" index = 0 subindex = 0 } # framed_protocol_7_ framed_ip_address_8_ = { label = "$lang_stats.field_labels.framed_ip_address_8_" type = "flat" index = 0 subindex = 0 } # framed_ip_address_8_ acct_session_time_46_ = { label = "$lang_stats.field_labels.acct_session_time_46_" type = "flat" index = 0 subindex = 0 } # acct_session_time_46_ connect_info_77_ = { label = "$lang_stats.field_labels.connect_info_77_" type = "flat" index = 0 subindex = 0 } # connect_info_77_ acct_input_octets_42_ = { label = "$lang_stats.field_labels.acct_input_octets_42_" type = "flat" index = 0 subindex = 0 } # acct_input_octets_42_ acct_output_octets_43_ = { label = "$lang_stats.field_labels.acct_output_octets_43_" type = "flat" index = 0 subindex = 0 } # acct_output_octets_43_ acct_input_packets_47_ = { label = "$lang_stats.field_labels.acct_input_packets_47_" type = "flat" index = 0 subindex = 0 } # acct_input_packets_47_ acct_output_packets_48_ = { label = "$lang_stats.field_labels.acct_output_packets_48_" type = "flat" index = 0 subindex = 0 } # acct_output_packets_48_ acct_terminate_cause_49_ = { label = "$lang_stats.field_labels.acct_terminate_cause_49_" type = "flat" index = 0 subindex = 0 } # acct_terminate_cause_49_ acct_authentic_45_ = { label = "$lang_stats.field_labels.acct_authentic_45_" type = "flat" index = 0 subindex = 0 } # acct_authentic_45_ nas_port_5_ = { label = "$lang_stats.field_labels.nas_port_5_" type = "flat" index = 0 subindex = 0 } # nas_port_5_ nas_port_type_61_ = { label = "$lang_stats.field_labels.nas_port_type_61_" type = "flat" index = 0 subindex = 0 } # nas_port_type_61_ calling_station_id_31_ = { label = "$lang_stats.field_labels.calling_station_id_31_" type = "flat" index = 0 subindex = 0 } # calling_station_id_31_ service_type_6_ = { label = "$lang_stats.field_labels.service_type_6_" type = "flat" index = 0 subindex = 0 } # service_type_6_ nas_ip_address_4_ = { label = "$lang_stats.field_labels.nas_ip_address_4_" type = "flat" index = 0 subindex = 0 } # nas_ip_address_4_ acct_delay_time_41_ = { label = "$lang_stats.field_labels.acct_delay_time_41_" type = "flat" index = 0 subindex = 0 } # acct_delay_time_41_ acct_session_id_44_ = { label = "$lang_stats.field_labels.acct_session_id_44_" type = "flat" index = 0 subindex = 0 } # acct_session_id_44_ } # log.fields # # Log Parsing Filters log.parsing_filters = { # Parse out date,time,record type,user,source IP, port 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^()([A-Z][a-z][a-z]-[0-9]+-[0-9]+) ([0-9]+:[0-9]+:[0-9]+) Radius accounting (stop record|start record) for user ([^ ]*) at NAS ([0-9.]*) port ([0-9]*),', '*KEY*,date,time,record_type,user,source_ip,port')" } # 1 # Parse out the comma-separated, =divided variables 2 = { label = "2" comment = "" value = "collect_listed_fields_using_regexp('()port [0-9]*, (.*)$', ', ', '=', '')" } # 2 # Accept this entry 3 = { label = "3" comment = "" value = "accept_collected_entry_using_regexp('()', false)" } # 3 } # log.parsing_filters # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day record_type = { label = "$lang_stats.field_labels.record_type" log_field = "record_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # record_type user = { label = "$lang_stats.field_labels.user" log_field = "user" type = "string" suppress_top = 0 suppress_bottom = 2 } # user source_ip = { label = "$lang_stats.field_labels.source_ip" log_field = "source_ip" type = "string" suppress_top = 0 suppress_bottom = 2 } # source_ip framed_protocol_7_ = { label = "$lang_stats.field_labels.framed_protocol_7_" log_field = "framed_protocol_7_" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_protocol_7_ framed_ip_address_8_ = { label = "$lang_stats.field_labels.framed_ip_address_8_" log_field = "framed_ip_address_8_" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_ip_address_8_ acct_session_time_46_ = { label = "$lang_stats.field_labels.acct_session_time_46_" log_field = "acct_session_time_46_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_session_time_46_ acct_session_id_44_ = { label = "$lang_stats.field_labels.acct_session_id_44_" log_field = "acct_session_id_44_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_session_id_44_ connect_info_77_ = { label = "$lang_stats.field_labels.connect_info_77_" log_field = "connect_info_77_" type = "string" suppress_top = 0 suppress_bottom = 2 } # connect_info_77_ acct_input_octets_42_ = { label = "$lang_stats.field_labels.acct_input_octets_42_" log_field = "acct_input_octets_42_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_input_octets_42_ acct_output_octets_43_ = { label = "$lang_stats.field_labels.acct_output_octets_43_" log_field = "acct_output_octets_43_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_output_octets_43_ acct_input_packets_47_ = { label = "$lang_stats.field_labels.acct_input_packets_47_" log_field = "acct_input_packets_47_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_input_packets_47_ acct_output_packets_48_ = { label = "$lang_stats.field_labels.acct_output_packets_48_" log_field = "acct_output_packets_48_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_output_packets_48_ acct_terminate_cause_49_ = { label = "$lang_stats.field_labels.acct_terminate_cause_49_" log_field = "acct_terminate_cause_49_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_terminate_cause_49_ acct_authentic_45_ = { label = "$lang_stats.field_labels.acct_authentic_45_" log_field = "acct_authentic_45_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_authentic_45_ nas_port_5_ = { label = "$lang_stats.field_labels.nas_port_5_" log_field = "nas_port_5_" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_port_5_ nas_port_type_61_ = { label = "$lang_stats.field_labels.nas_port_type_61_" log_field = "nas_port_type_61_" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_port_type_61_ calling_station_id_31_ = { label = "$lang_stats.field_labels.calling_station_id_31_" log_field = "calling_station_id_31_" type = "string" suppress_top = 0 suppress_bottom = 2 } # calling_station_id_31_ service_type_6_ = { label = "$lang_stats.field_labels.service_type_6_" log_field = "service_type_6_" type = "string" suppress_top = 0 suppress_bottom = 2 } # service_type_6_ nas_ip_address_4_ = { label = "$lang_stats.field_labels.nas_ip_address_4_" log_field = "nas_ip_address_4_" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_ip_address_4_ acct_delay_time_41_ = { label = "$lang_stats.field_labels.acct_delay_time_41_" log_field = "acct_delay_time_41_" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_delay_time_41_ } # database.fields # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'hits = 1;' } # mark_entry } # log.filters database.numerical_fields = { hits = { label = "$lang_stats.field_labels.hits" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # hits visitors = { label = "$lang_stats.field_labels.visitors" default = false requires_log_field = true log_field = "source_ip" type = "unique" display_format_type = "integer" } # visitors } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" record_type = true user = true source_ip = true framed_protocol_7_ = true framed_ip_address_8_ = true acct_session_time_46_ = true acct_session_id_44_ = true connect_info_77_ = true acct_input_octets_42_ = true acct_output_octets_43_ = true acct_input_packets_47_ = true acct_output_packets_48_ = true acct_terminate_cause_49_ = true acct_authentic_45_ = true nas_port_5_ = true nas_port_type_61_ = true calling_station_id_31_ = true service_type_6_ = true nas_ip_address_4_ = true acct_delay_time_41_ = true } # report_groups } # create_profile_wizard_options not_supported = { sessions = true pageviews = true bandwidth = true } # not_supported } # radius_accounting_ii