Skip to content

Instantly share code, notes, and snippets.

@sirhopcount

sirhopcount/gist:7afb6fdc9ac68ae4d009

Forked from Synchro/gist:5917252
Created May 27, 2014 07:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sirhopcount/7afb6fdc9ac68ae4d009 to your computer and use it in GitHub Desktop.
Save sirhopcount/7afb6fdc9ac68ae4d009 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
grep {
type => "syslog"
match => [ "syslog_program", "drupal" ]
add_tag => "Drupal"
drop => false
}
grok {
type => "syslog"
tags => [ "Drupal" ]
match => [ "@message", "^https?://%{HOSTNAME:drupal_vhost}\|%{NUMBER:drupal_timestamp}\|(?<drupal_action>[^\|]*)\|%{IP:drupal_ip}\|(?<drupal_request_uri>[^\|]*)\|(?<drupal_referer>[^\|]*)\|(?<drupal_uid>[^\|]*)\|(?<drupal_link>[^\|]*)\|(?<drupal_message>.*)" ]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment