# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. apache_combined_sdafter_agent = { plugin_version = "1.4" # Initial creation - 1.0 # 2010-10-11 - 1.1 - MSG - Edited info lines. # 2013-01-23 - 1.2 - gas - updated for web_server_package snapon # 2013-01-23 - 1.3 - GMF - Removed derived fields from the plug-in, which are also added by web_server_package snapon. Removed all subnodes of log fields and database fields (no longer needed; filled in by Create Profile Wizard or web_server_package), except log field index and subindex. # 2014-03-10 - 1.4 - GMF - Fixed index subindex numbers which were off in some cases. info.1.manufacturer = "Apache" info.1.device = "NCSA Combined With Server Domain After Agent" info.1.version.1 = "" # The name of the log format log.format.format_label = "Apache/NCSA Combined Format With Server Domain After Agent" log.miscellaneous.log_data_type = "http_access" log.miscellaneous.log_format_type = "web_server" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^[^ ]* [^ ]* .* \\[../.../....:..:..:...*\\] \"[A-Z]* [^ ]* HTTP.*\" [0-9]* [-0-9]* [^ ]* \".*\" [^ ]* *$" # Treat fields surrounded by square brackets (e.g. the date/time field) as a single quoted field. log.format.treat_brackets_as_quotes = "true" log.format.common_log_format = "true" log.format.ignore_format_lines = "true" # The format of dates and times in this log log.format.date_format = "dd/mmm/yyyy:hh:mm:ss" log.format.time_format = "dd/mmm/yyyy:hh:mm:ss" # Log fields log.fields = { hostname.index = 1 authenticated_user.index = 3 date_time = { index = 4 subindex = 1 } operation = { index = 5 subindex = 1 } # operation page = { index = 5 subindex = 2 } # page protocol = { index = 5 subindex = 3 } # protocol server_response.index = 6 size.index = 7 referrer.index = 8 agent.index = 9 server_domain.index = 10 } # log.fields # Database fields database.fields = { date_time = "" day_of_week = "" hour_of_day = "" server_domain = "" page = "" hostname = "" referrer = "" authenticated_user = "" server_response = "" } # database.fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" content_group = { page = true file_type = true } visitor_demographics_group = { hostname = true domain_description = true location = true authenticated_user = true } visitor_systems_group = { screen_dimensions = true screen_depth = true web_browser = true operating_system = true } referrer_group = { referrer = true referrer_description = true search_engine = true search_phrase = true search_phrase_by_search_engine = true } other_group = { worm = true spider = true server_domain = true server_response = true } } # report_groups snapons = { # Attach a web_server_package snapon web_server_package = { snapon = "web_server_package" name = "web_server_package" label = "$lang_admin.snapons.web_server_package.label" parameters = { user_agent_field.parameter_value = "agent" page_field.parameter_value = "page" client_ip_field.parameter_value = "hostname" server_response_field.parameter_value = "server_response" referrer_field.parameter_value = "referrer" authenticated_user.parameter_value = "authenticated_user" hits_field = { parameter_value = "$lang_stats.field_labels.hits" final_node_name = "hits" } # hits visitors_field = { parameter_value = "$lang_stats.field_labels.visitors" final_node_name = "visitors" } # visitors_field sc_bytes_field = { parameter_value = "$lang_stats.field_labels.size" final_node_name = "size" } # sc_bytes_field cs_bytes_field = { parameter_value = "none" final_node_name = "none" } # cs_bytes_field } # parameters } # web_server_package } # snapons } # create_profile_wizard_options } # apache_combined_sdafter_agent