Fredrik Lysén flysen
flysen
/ exchange2016.grok
Last active
September 28, 2017 07:20
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| %{TIMESTAMP_ISO8601:logdate},(%{IPORHOST:client_ip})?,(%{IPORHOST:client_hostname})?,(%{IPORHOST:server_ip})?,(%{IPORHOST:server_hostname})?,("%{DATA:source_context}"|%{DATA:source_context}),(%{DATA:connector_id})?,(%{WORD:source})?,(%{WORD:event_id})?,(%{NUMBER:internal_message_id})?,<(%{DATA:message_id})?>,(%{UUID:network_message_id})?,(%{DATA:recipient_address})?,(%{DATA:recipient_status})?,(%{NUMBER:total_bytes})?,(%{NUMBER:recipient_count})?,(%{DATA:related_recipient_address})?,(%{DATA:reference})?,(%{DATA:message_subject})?,(%{DATA:sender_address})?,(%{DATA:return_path})?,(%{DATA:message_info})?,(%{WORD:directionality})?,(%{DATA:tenant_id})?,(%{IPORHOST:original_client_ip})?,(%{IPORHOST:original_server_ip})?,(%{GREEDYDATA:custom_data})? |
flysen
/ log4j.xml
Last active
February 16, 2017 15:48
— forked from nhniches/log4j.xml
log4j configuration example
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0" encoding="UTF-8" ?> | |
| <!DOCTYPE log4j:configuration SYSTEM "http://logging.apache.org/log4j/1.2/apidocs/org/apache/log4j/xml/doc-files/log4j.dtd"> | |
| <log4j:configuration xmlns:log4j="http://jakarta.apache.org/log4j/" | |
| debug="true"> | |
| <appender name="console" class="org.apache.log4j.ConsoleAppender"> | |
| <param name="Target" value="System.out" /> | |
| <param name="Threshold" value="INFO" /> | |
| <layout class="org.apache.log4j.EnhancedPatternLayout"> | |
| <param name="ConversionPattern" |
flysen
/ postfix
Last active
December 19, 2016 12:13
— forked from TinLe/postfix
postfix grok patterns for logstash
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Milter | |
| HELO (?:\[%{IP:helo}\]|%{HOST:helo}|%{DATA:helo}) | |
| MILTERCONNECT %{QUEUEID:qid}: milter-reject: CONNECT from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; proto=%{WORD:proto} | |
| MILTERUNKNOWN %{QUEUEID:qid}: milter-reject: UNKNOWN from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; proto=%{WORD:proto} | |
| MILTEREHLO %{QUEUEID:qid}: milter-reject: EHLO from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; proto=%{WORD:proto} helo=<%{HELO}> | |
| MILTERMAIL %{QUEUEID:qid}: milter-reject: MAIL from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; from=<%{EMAILADDRESS:from}> proto=%{WORD:proto} helo=<%{HELO}> | |
| MILTERHELO %{QUEUEID:qid}: milter-reject: HELO from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; proto=%{WORD:proto} helo=<%{HELO}> | |
| MILTERRCPT %{QUEUEID:qid}: milter-reject: RCPT from %{RELAY:relay}: %{GREEDYDATA:milter_reason}; from=<%{EMAILADDRESS:from}> to=<%{EMAILADDRESS:to}> proto=%{WORD:proto} helo=<%{HELO}> | |
| MILTERENDOFMESSAGE %{QUEUEID:qid}: milter-reject: END-OF-MESSAGE from %{RELAY:relay}: %{GREEDYDATA:milter_reas |