# Copyright (c) 2013 Flowerfire, Inc.  All Rights Reserved.
ibm_http_server_common = {

  plugin_version = "1.0"

  info.1.manufacturer = "IBM"
  info.1.device = "HTTP Server Common Log Format"
  info.1.version.1 = ""

  # 2013-08-27 - 1.0 - GMF - Initial implementation

  # The name of the log format
  log.format.format_label = "IBM HTTP Server Common Log Format"
  log.miscellaneous.log_data_type = "web_server"
  log.miscellaneous.log_format_type = "web_server"

  # The log is in this format if any of the first ten lines match this regular expression
  #12.34.56.78 - - [14/08/2013:00:00:01 -0500] "GET /favicon.ico HTTP/1.1" 404 10866 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; SiteKiosk 7.8 Build 320; OND4C00624254)"
  log.format.autodetect_regular_expression = `^[0-9.a-f:]+ [^ ]+ [^ ]+ [[][0-9][0-9]/[0-9][0-9]/[0-9][0-9][0-9][0-9]:[0-9][0-9]:[0-9][0-9]:[0-9][0-9] [^]]+[]] `

  log.format.date_format = "dd/mm/yyyy"

  log.format.parsing_regular_expression = `^([0-9.a-f:]+) ([^ ]+) ([^ ]+) [[]([0-9][0-9]/[0-9][0-9]/[0-9][0-9][0-9][0-9]):([0-9][0-9]:[0-9][0-9]:[0-9][0-9]) [^]]+[]] "([A-Z]+) ([^ ]+) ([^"]+)" ([0-9-]+) ([0-9-]+) "([^"]+)" "([^"]+)"`

  # Log fields
  log.fields = {

    hostname = ""
    server_domain = ""
    authenticated_user = ""
    date = ""
    time = ""
    operation = ""
    page = ""
    protocol = ""
    server_response = ""
    size = ""
    referrer = ""
    user_agent = ""

  } # log.fields


  # Database fields
  database.fields = {

    date_time = ""
    day_of_week = ""
    hour_of_day = ""
    page = ""
    hostname = ""
    referrer = ""
    server_domain = ""
    authenticated_user = ""
    server_response = ""

  } # database.fields

  create_profile_wizard_options = {
  
    # How the reports should be grouped in the report menu
    report_groups = {
      date_time_group = ""
      content_group = {
        page = true
      }
      visitor_demographics_group = {
        hostname = true
        authenticated_user = true
      }
      referrer_group = {
        referrer = true
      }
      other_group = {
        server_domain = true
        server_response = true
      }
    } # report_groups

    snapons = {

      # Attach a web_server_package snapon
      web_server_package = {
	snapon = "web_server_package"
	name = "web_server_package"
	label = "$lang_admin.snapons.web_server_package.label"
        parameters = {
          user_agent_field.parameter_value = "user_agent"
          page_field.parameter_value = "page"
          client_ip_field.parameter_value = "hostname"
          server_response_field.parameter_value = "server_response"
          referrer_field.parameter_value = "referrer"
          authenticated_user.parameter_value = "authenticated_user"
          hits_field = {
            parameter_value = "$lang_stats.field_labels.hits"
            final_node_name = "hits"
          } # hits
          visitors_field = {
            parameter_value = "$lang_stats.field_labels.visitors"
            final_node_name = "visitors"
          } # visitors_field
          sc_bytes_field = {
            parameter_value = "$lang_stats.field_labels.size"
            final_node_name = "size"
          } # sc_bytes_field
          cs_bytes_field = {
            parameter_value = "none"
            final_node_name = "none"
          } # cs_bytes_field
        } # parameters
      } # web_server_package

    } # snapons

  } # create_profile_wizard_options

} # ibm_http_server_common