Jordan Sissel
83fbdbdd93
- fix haproxy pattern (syslog pattern name changed)
2011-07-30 11:30:13 -07:00
Pete Fritchman
ae5a141935
allow apache access logs with an invalid referer: field
2011-05-21 00:37:38 -07:00
Tello, Inc
b60dc12548
Add a custom grok pattern for parsing MySQL slow query log datetimes
2011-01-27 06:39:01 +00:00
ec2
c09d5e2021
Add new grok pattern for matching dates like 'Wed Dec 08 19:57:42 -0800 2010' which are found in rails logs
2011-01-22 09:56:59 +00:00
Jordan Sissel
fc885e819c
- Update java patterns to work properly (tested with actual stack
...
traces)
2010-11-20 10:12:44 +00:00
Jordan Sissel
d34c4b8358
- Add java patterns
2010-11-20 01:58:34 -08:00
Jordan Sissel
1a2ca3fc28
- Add some nagios patterns
2010-11-11 07:37:07 +00:00
Jordan Sissel
65a115fee6
- Add support for iso8601 timestamps in syslog messages
2010-11-09 10:22:25 +00:00
Jordan Sissel
57f480adeb
- Make TZ in DATESTAMP_OTHER optional
...
- Add more debugging to filters/grok to make it easier to see pattern compile problems.
- Add percentage progress to rate.sh (for tracking long imports on logstash)
- Add content-type to the webserver
- Update to web interface to use new @-prefixed notation (@message, etc)
2010-10-31 08:59:28 +00:00
Jordan Sissel
d2f8cadc50
- add Logger support
2010-10-28 19:05:14 +00:00
Jordan Sissel
2053ceabcb
- revert :port addition
2010-10-28 10:59:08 +00:00
Jordan Sissel
b8358e6004
- Add '_' to valid characters in URI paths and query parameters
2010-10-28 10:49:44 +00:00
Jordan Sissel
953fadeb80
- Import from grok svn r3079 (all pattern tests passing)
2010-10-28 09:20:07 +00:00
Jordan Sissel
4aea3bddb3
- Sync grok-patterns from grok svn HEAD.
2010-05-18 08:11:06 +00:00
Jordan Sissel
32ca7fbaea
- copy grok patterns again
2010-04-14 09:19:21 +00:00
Jordan Sissel
cbfa08081d
- Copy new patterns from grok
2010-04-14 07:42:33 +00:00
Jordan Sissel
473ee8cd74
- Add ':' to URIPATH
2009-10-25 09:46:00 +00:00
Jordan Sissel
78cfbff565
- uri paths can have /[@{}]/ in it
2009-10-25 04:26:10 +00:00
Jordan Sissel
4abe95037a
- syslog program names can have periods or underscores
2009-10-23 16:57:27 +00:00
Pete Fritchman
27204e825b
- remove some debugging cruft
...
- remove sample agent.redhat.rb; sample config is the same thing
- indexers now broadcast to each other and build up a directory
- indexers respond to a directory request and provide a list of indexers
- move some errors/usage messages to $stderr
- refactor search.rb to query all available indexers
2009-10-18 23:38:35 +00:00
Jordan Sissel
3b8a9416b6
- Add cron patterns to linux-syslog
2009-09-19 10:06:49 +00:00
Jordan Sissel
4b870cc9fd
- add haproxy bits
2009-09-11 10:54:57 +00:00
Pete Fritchman
40f830d85a
- capture pid in SYSLOGPROG
...
- add some linux-syslog patterns
- sample config for linux-syslog
2009-08-10 02:13:05 +00:00
Pete Fritchman
ee69c120c7
- OK, so I'm crazy. File load order does not matter, and it shouldn't.
2009-08-10 02:05:58 +00:00
Pete Fritchman
3d1745efc4
- work around a weird grok bug (?), load patterns in sort order, and
...
always load the grok-patterns first
2009-08-10 01:59:51 +00:00
Pete Fritchman
f622532240
- move grok-patterns to patterns/ subdir
...
- load all pattern files under patterns/
- grok captures don't include @LINE, so put it there ourselves
- properly filter grok captures per comments
- tear out grok cmdline stuff
- switch to seconds since epoch for @DATE
- add firewalls pattern with initial netscreen session close pattern
2009-08-09 20:40:36 +00:00
