# Copyright (c) 2012 Flowerfire, Inc. All Rights Reserved. a10_ax_server = { plugin_version = "1.0" # 2012-09-06 - Benson - 1.0 - Initial creation info.1.manufacturer = "A10 Networks" info.1.device = "AX Series ADC and Server Load Balancer" info.1.version.1 = "1.0" # The name of the log format log.format.format_label = "A10 Networks AX Series SLB Log Format" log.miscellaneous.log_data_type = "syslog_required" log.miscellaneous.log_format_type = "application" # The log is in this format if any of the first ten lines match this regular expression #a10logd: [HMON]<6> SLB server bbb_aaa (10.123.45.67) is up #a10logd: [HMON]<6> SLB server bar_foo (10.123.4.56) port 80 is up #a10logd: [HMON]<6> SLB server foo_bar (10.123.56.78) TCP port 80 of group FOO is up. #a10logd: [AX]<6> Service http on virtual Server BAR port 80 is up log.format.autodetect_expression = ` matches_regular_expression(volatile.log_data_line, "a10logd: \\[[A-Z]+\\]<[0-9]+>") ` # All log field parsing will be done using the parsing filters log.format.parse_only_with_filters = "true" # Log fields log.fields = { log_type = "" log_level = "" server_type = "" hostname = "" ip_address = "" protocol = "" port = "" group = "" status = "" message = "" events = "" } # log.fields # Log Parsing Filters log.parsing_filters.parse = ` if (matches_regular_expression(v.syslog_message, 'a10logd: \\[([A-Z]+)\\]<([0-9]+)> (.*)')) then ( v.message = $3; set_collected_field('', 'log_type', $1); set_collected_field('', 'log_level', $2); set_collected_field('', 'message', $3); if (matches_regular_expression(v.message, 'SLB server ([^ ]+) \\(([0-9.]+)\\) (.*)')) then ( set_collected_field('', 'server_type' , 'SLB server'); set_collected_field('', 'hostname' , $1); set_collected_field('', 'ip_address' , $2); v.message = $3; if (matches_regular_expression(v.message, '^is ([a-z]+)')) then ( set_collected_field('', 'status' , $1); ); else if (matches_regular_expression(v.message, 'port ([0-9]+) is ([a-z]+)')) then ( set_collected_field('', 'port' , $1); set_collected_field('', 'status' , $2); ); else if (matches_regular_expression(v.message, '([A-Z]+) port ([0-9]+) of group ([^ ]+) is ([a-z]+). ')) then ( set_collected_field('', 'protocol' , $1); set_collected_field('', 'port' , $2); set_collected_field('', 'group' , $3); set_collected_field('', 'status' , $4); ); ); else if (matches_regular_expression(v.message, 'Service ([^ ]+) on virtual Server ([^ ]+) port ([0-9]+) is ([a-z]+)')) then ( set_collected_field('', 'server_type' , 'Virtual server'); set_collected_field('', 'hostname' , $2); set_collected_field('', 'port' , $3); set_collected_field('', 'status' , $4); ); accept_collected_entry('', false); ); ` # Database fields database.fields = { log_type = "" log_level = "" server_type = "" hostname = "" ip_address = "" protocol = "" port = "" group = "" status = "" message = "" } # database.fields # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'events = 1;' } # mark_entry } # log.filters database.numerical_fields = { events = { label = "$lang_stats.field_labels.events" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # accesses } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" } # report_groups snapons = { # Add the standard reports add_standard_reports = { name = "add_standard_reports" label = "add_standard_reports" snapon = "add_standard_reports" } # add_standard_reports } # snapons } # create_profile_wizard_options } # a10_ax_server