Commit graph

24 commits

Author SHA1 Message Date
Tello, Inc
b60dc12548 Add a custom grok pattern for parsing MySQL slow query log datetimes 2011-01-27 06:39:01 +00:00
ec2
c09d5e2021 Add new grok pattern for matching dates like 'Wed Dec 08 19:57:42 -0800 2010' which are found in rails logs 2011-01-22 09:56:59 +00:00
Jordan Sissel
fc885e819c - Update java patterns to work properly (tested with actual stack
traces)
2010-11-20 10:12:44 +00:00
Jordan Sissel
d34c4b8358 - Add java patterns 2010-11-20 01:58:34 -08:00
Jordan Sissel
1a2ca3fc28 - Add some nagios patterns 2010-11-11 07:37:07 +00:00
Jordan Sissel
65a115fee6 - Add support for iso8601 timestamps in syslog messages 2010-11-09 10:22:25 +00:00
Jordan Sissel
57f480adeb - Make TZ in DATESTAMP_OTHER optional
- Add more debugging to filters/grok to make it easier to see pattern compile problems.
- Add percentage progress to rate.sh (for tracking long imports on logstash)
- Add content-type to the webserver
- Update to web interface to use new @-prefixed notation (@message, etc)
2010-10-31 08:59:28 +00:00
Jordan Sissel
d2f8cadc50 - add Logger support 2010-10-28 19:05:14 +00:00
Jordan Sissel
2053ceabcb - revert :port addition 2010-10-28 10:59:08 +00:00
Jordan Sissel
b8358e6004 - Add '_' to valid characters in URI paths and query parameters 2010-10-28 10:49:44 +00:00
Jordan Sissel
953fadeb80 - Import from grok svn r3079 (all pattern tests passing) 2010-10-28 09:20:07 +00:00
Jordan Sissel
4aea3bddb3 - Sync grok-patterns from grok svn HEAD. 2010-05-18 08:11:06 +00:00
Jordan Sissel
32ca7fbaea - copy grok patterns again 2010-04-14 09:19:21 +00:00
Jordan Sissel
cbfa08081d - Copy new patterns from grok 2010-04-14 07:42:33 +00:00
Jordan Sissel
473ee8cd74 - Add ':' to URIPATH 2009-10-25 09:46:00 +00:00
Jordan Sissel
78cfbff565 - uri paths can have /[@{}]/ in it 2009-10-25 04:26:10 +00:00
Jordan Sissel
4abe95037a - syslog program names can have periods or underscores 2009-10-23 16:57:27 +00:00
Pete Fritchman
27204e825b - remove some debugging cruft
- remove sample agent.redhat.rb; sample config is the same thing
- indexers now broadcast to each other and build up a directory
- indexers respond to a directory request and provide a list of indexers
- move some errors/usage messages to $stderr
- refactor search.rb to query all available indexers
2009-10-18 23:38:35 +00:00
Jordan Sissel
3b8a9416b6 - Add cron patterns to linux-syslog 2009-09-19 10:06:49 +00:00
Jordan Sissel
4b870cc9fd - add haproxy bits 2009-09-11 10:54:57 +00:00
Pete Fritchman
40f830d85a - capture pid in SYSLOGPROG
- add some linux-syslog patterns
- sample config for linux-syslog
2009-08-10 02:13:05 +00:00
Pete Fritchman
ee69c120c7 - OK, so I'm crazy. File load order does not matter, and it shouldn't. 2009-08-10 02:05:58 +00:00
Pete Fritchman
3d1745efc4 - work around a weird grok bug (?), load patterns in sort order, and
always load the grok-patterns first
2009-08-10 01:59:51 +00:00
Pete Fritchman
f622532240 - move grok-patterns to patterns/ subdir
- load all pattern files under patterns/
- grok captures don't include @LINE, so put it there ourselves
- properly filter grok captures per comments
- tear out grok cmdline stuff
- switch to seconds since epoch for @DATE
- add firewalls pattern with initial netscreen session close pattern
2009-08-09 20:40:36 +00:00