Skip to content

Instantly share code, notes, and snippets.

@mdgreenwald
Created July 3, 2018 04:18
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mdgreenwald/3fbb198952825272f7487ff72291ef44 to your computer and use it in GitHub Desktop.
Save mdgreenwald/3fbb198952825272f7487ff72291ef44 to your computer and use it in GitHub Desktop.
Fluentbit Regex Parser for Fastly Log Streaming V2 Syslog Endpoint Classic
[PARSER]
Name syslog-fastly
Format regex
Regex \<(?<pri>[0-9]{1,3})\>(?<msgtime>[^ ]+) (?<cachenode>[a-zA-Z0-9_\/\.\-]*) (?<logname>[^\[]*)(?:\[(?<pid>[0-9]+)\])?(?:[^\:]*\:)? (?<host>[^ ]*) [^ ]* [^ ]* \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)$
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment