oracle_login_attempts = { # # # "s2" - This log format has a set format of fields # that are the same on each line and one regular expression # can match each line and pull out the field values. # # If parse_only_with_filters is false or unspecified, # but log_file_format_regular_expression is specified, # Sawmill uses that regular expression to parse each line. # the log fields are set according to the parenthesised subexpressions # in the regular expression, so the first parenthesised section of # the regular expression is put in the first field listed in log_field_info, etc. # # ======================================================================== # # Oracle Failed Login Attempts log Format # # # # # ####################### # # # LOG FORMAT OPTIONS # # # ####################### # # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+lff # The name of this format # # Format log_file_format {value} log.format.format_label = "Oracle Failed Login Attempts log Format" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ldt # This log is the following type #Format: log_data_type {value} log.miscellaneous.log_data_type = "network" log.miscellaneous.log_format_type = "application" # Determine what types of data this log file will support. # Un-comment the type below to disable this in the database # # Format: $notsupported {value} # $notsupported daybyday # $notsupported hits # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+tbaq # if there are square brackets around some fields (date/time) # you can specify to have this treated as one field # Format: treat_brackets_as_quotes {true|false} log.format.treat_brackets_as_quotes = "false" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ldf # The format of dates in this log # Format: log_date_format {value} log.format.date_format = "dd/mmm/yy" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ltf # The format of times in this log # Format: log_time_format {value} log.format.time_format = "h:mm" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+en # The name of an entry in this log # Format: entry_name {value} statistics.miscellaneous.entry_name = "attempt" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+lfare # We use this to recognise the format and "auto-detect". # Format: log_format_autodetect_regular_expression {value} log.format.autodetect_lines = "20" log.format.autodetect_regular_expression = "^[A-Z]+ *[^ ]+ *[^ ]+ *[0-9]+-[A-Z]+-[0-9]+ [0-9:]+" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+powf # This template is for those formats that require parsing filters # so is set to "true" as default # Format: parse_only_with_filters ( true | false ) log.format.parse_only_with_filters = "false" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+lffre # If the lines are all in the same format we can use one regex string to parse the log # Format: log_file_format_regular_expression {value} log.format.parsing_regular_expression = "^([A-Z]+) *([^ ]+) *([^ ]+) *([0-9]+-[A-Z]+-[0-9]+) ([0-9:]+)" ########################### # # # # ########################### # # # # Log fields log.fields = { user_name = { label = "$lang_stats.field_labels.user_name" type = "flat" index = 0 subindex = 0 } # user_name login_name = { label = "$lang_stats.field_labels.login_name" type = "flat" index = 0 subindex = 0 } # login_name terminal_name = { label = "$lang_stats.field_labels.terminal_name" type = "flat" index = 0 subindex = 0 } # terminal_name date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = true leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time } # log.fields ############################### # # # # ############################### # # See http://www.sawmill.net/cgi-bin/sawmilldocs?ho+docs-hierarchies # for information about hierarchies. # # # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day user_name = { label = "$lang_stats.field_labels.user_name" log_field = "user_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # user_name login_name = { label = "$lang_stats.field_labels.login_name" log_field = "login_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_name terminal_name = { label = "$lang_stats.field_labels.terminal_name" log_field = "terminal_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # terminal_name } # database.fields # # # # # "" # # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'attempt = 1;' } # mark_entry } # log.filters database.numerical_fields = { attempt = { label = "$lang_stats.field_labels.attempt" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # attempt } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" day_of_week = true hour_of_day = true user_name = true login_name = true terminal_name = true } # report_groups } # create_profile_wizard_options not_supported = { individualhosts = true sessions = true sessionpages = true bandwidth = true pageviews = true visitors = true } # not_supported } # oracle_login_attempts