nsyslog/examples/config/data/parser001.json

Modular new generation log agent. Reads, transform, aggregate, correlate and send logs from sources to destinations

{
	"start": [
		{
			"description": "Timestamp",
			"name": "timestamp",
			"regex": "^(\\d+\\-\\d+\\-\\d+T\\d+:\\d+:\\d+(\\.\\d+)?(Z)?)",
			"next" : "hostname"
		}
	],

	"hostname" : [
		{
			"description": "Source hostname",
			"name" : ["hostname"],
			"regex" : "[a-zA-Z][^ =>]+",
			"next" : "ipaddr"
		}
	],
	"ipaddr": [
		{
			"description": "Source IP address",
			"name": "ipaddr",
			"regex" : "\\d+\\.\\d+\\.\\d+\\.\\d+"
		},
		{
			"description" : "Jump state",
			"name" : null,
			"regex" : "=>",
			"next" : "body"
		}
	],

	"body" : [
		{
			"description" : "Message body",
			"name" : "body",
			"regex" : ".*",
			"next" : "start"
		}
	]
}