war_ftpalt = { # The name of the log format log.format.format_label = "War FTP Log Format (Alternate)" log.miscellaneous.log_data_type = "ftp" log.miscellaneous.log_format_type = "ftp_server" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^S [0-9][0-9]/[0-9][0-9]/[0-9][0-9] [0-9][0-9]:[0-9][0-9]:[0-9][0-9] .*$" # All log field parsing will be done using the parsing filters log.format.parse_only_with_filters = "true" # The format of dates and times in this log log.format.date_format = "mm/dd/yy" log.format.time_format = "hh:mm:ss" # Log entries are called downloads statistics.miscellaneous.entry_name = "downloads" # Log fields log.fields = { date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time source_ip = { label = "$lang_stats.field_labels.source_ip" type = "host" index = 0 subindex = 0 hierarchy_dividers = "." left_to_right = false leading_divider = "false" } # source_ip source_port = { label = "$lang_stats.field_labels.source_port" type = "flat" index = 0 subindex = 0 } # source_port destination__ip = { label = "$lang_stats.field_labels.destination__ip" type = "flat" index = 0 subindex = 0 } # destination__ip destination_port = { label = "$lang_stats.field_labels.destination_port" type = "flat" index = 0 subindex = 0 } # destination_port size = { label = "$lang_stats.field_labels.size" type = "size" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # size file = { label = "$lang_stats.field_labels.file" type = "flat" index = 0 subindex = 0 } # file category = { label = "$lang_stats.field_labels.category" type = "flat" index = 0 subindex = 0 } # category operation = { label = "$lang_stats.field_labels.operation" type = "flat" index = 0 subindex = 0 } # operation message = { label = "$lang_stats.field_labels.message" type = "flat" index = 0 subindex = 0 } # message user = { label = "$lang_stats.field_labels.user" type = "flat" index = 0 subindex = 0 } # user programerr = { label = "$lang_stats.field_labels.programerr" type = "flat" index = 0 subindex = 0 } # programerr } # log.fields # # Log Parsing Filters log.parsing_filters = { # Parse an L line 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^()(L) ([0-9][0-9]/[0-9][0-9]/[0-9][0-9]) ([0-9][0-9]:[0-9][0-9]:[0-9][0-9]) .* \\\\(User=([0-9]*).* User (logged in)$', '*KEY*,category,date,time,user,message')" } # 1 # Parse an E line 2 = { label = "2" comment = "" value = "collect_fields_using_regexp('^()(E) ([0-9][0-9]/[0-9][0-9]/[0-9][0-9]) ([0-9][0-9]:[0-9][0-9]:[0-9][0-9]) .* \\\\(User=([0-9]*).*\\\\) \\\\(ProgramErr=([0-9]*)\\\\) \\\\[([^]]*)\\\\] .* - ([^.]*)\\\\.$', '*KEY*,category,date,time,user,programerr,operation,message')" } # 2 # Parse an r line 3 = { label = "3" comment = "" value = "collect_fields_using_regexp('^()(r) ([0-9][0-9]/[0-9][0-9]/[0-9][0-9]) ([0-9][0-9]:[0-9][0-9]:[0-9][0-9]) .* \\\\(User=([0-9]*).*\\\\[([^]]*)\\\\] (Uploaded file) \"file:([^\"]*)\"\\\\. ([0-9]*) bytes', '*KEY*,category,date,time,user,operation,message,file,size')" } # 3 # Parse an O line 4 = { label = "4" comment = "" value = "collect_fields_using_regexp('^()(O) ([0-9][0-9]/[0-9][0-9]/[0-9][0-9]) ([0-9][0-9]:[0-9][0-9]:[0-9][0-9]) .* \\\\(User=([0-9]*.*) *\\\\) \\\\[([^]]*)\\\\] User ([^.]*)\\\\.$', '*KEY*,category,date,time,user,operation,message')" } # 4 # Parse an I line 5 = { label = "5" comment = "" value = "collect_fields_using_regexp('^()(I) ([0-9][0-9]/[0-9][0-9]/[0-9][0-9]) ([0-9][0-9]:[0-9][0-9]:[0-9][0-9]) .* \\\\(User=([0-9]*) *\\\\) \\\\[([^]]*)\\\\] Client \\\\(([^:]*):([0-9]*)->([^:]*):([0-9]*)\\\\) is ([^.]*)\\\\.$', '*KEY*,category,date,time,user,operation,source_ip,source_port,destination_ip,destination_port,message')" } # 5 # Accept this log entry 6 = { label = "6" comment = "" value = "accept_collected_entry_using_regexp('^()', false)" } # 6 } # log.parsing_filters # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day file = { label = "$lang_stats.field_labels.file" log_field = "file" type = "string" suppress_top = 0 suppress_bottom = 2 } # file source_ip = { label = "$lang_stats.field_labels.source_ip" log_field = "source_ip" type = "string" suppress_top = 0 suppress_bottom = 2 } # source_ip source_port = { label = "$lang_stats.field_labels.source_port" log_field = "source_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # source_port destination_ip = { label = "$lang_stats.field_labels.destination_ip" log_field = "destination_ip" type = "string" suppress_top = 0 suppress_bottom = 2 } # destination_ip destination_port = { label = "$lang_stats.field_labels.destination_port" log_field = "destination_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # destination_port category = { label = "$lang_stats.field_labels.category" log_field = "category" type = "string" suppress_top = 0 suppress_bottom = 2 } # category operation = { label = "$lang_stats.field_labels.operation" log_field = "operation" type = "string" suppress_top = 0 suppress_bottom = 2 } # operation user = { label = "$lang_stats.field_labels.user" log_field = "user" type = "string" suppress_top = 0 suppress_bottom = 2 } # user programerr = { label = "$lang_stats.field_labels.programerr" log_field = "programerr" type = "string" suppress_top = 0 suppress_bottom = 2 } # programerr } # database.fields # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'downloads = 1;' } # mark_entry } # log.filters database.numerical_fields = { downloads = { label = "$lang_stats.field_labels.downloads" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # downloads visitors = { label = "$lang_stats.field_labels.visitors" default = false requires_log_field = true log_field = "source_ip" type = "unique" display_format_type = "integer" } # visitors size = { label = "$lang_stats.field_labels.size" default = false requires_log_field = true log_field = "size" type = "float" display_format_type = "bandwidth" } # size } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true host_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" day_of_week = true hour_of_day = true file = true source_ip = true source_port = true destination_ip = true destination_port = true category = true operation = true user = true programerr = true } # report_groups } # create_profile_wizard_options not_supported = { sessions = true pageviews = true individualhosts = true } # not_supported } # war_ftpalt