Mercurial > logstash
diff sendmail.pattern @ 1:59fe08a2fcbe
switch to flatjar.jar; fix sendmail patterns
author | Carl Byington <carl@five-ten-sg.com> |
---|---|
date | Fri, 01 Mar 2013 18:40:11 -0800 |
parents | df4952a2fb06 |
children |
line wrap: on
line diff
--- a/sendmail.pattern Fri Mar 01 14:58:09 2013 -0800 +++ b/sendmail.pattern Fri Mar 01 18:40:11 2013 -0800 @@ -1,8 +1,10 @@ # https://raw.github.com/augieschwer/grok-patterns/master/sendmail.grok # +LOGIN [.a-zA-Z0-9_-]+ EMAIL %{LOGIN}@%{IPORHOST} DSN [0-9][.][0-9][.][0-9] +QID [A-za-z0-9]{14} # Match a relay that gives us a QID in the return status. SENDMAIL_TO_1 %{SYSLOGBASE} %{QID:qid}: to=<%{EMAIL:to}>, (%{WORD}=%{DATA},)+ relay=%{IPORHOST:relay} \[%{IP}\], dsn=%{DSN:dsn}, stat=%{DATA:status} \(%{QID:qid} %{GREEDYDATA:status_message}\)