diff --git a/src/formats/vmw_log.json b/src/formats/vmw_log.json index ad3ad47b..2e393c4e 100644 --- a/src/formats/vmw_log.json +++ b/src/formats/vmw_log.json @@ -6,16 +6,16 @@ "url": "http://kb.vmware.com/kb/2004201", "regex": { "6.0+": { - "pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?\\w+) (?[\\w\\-]+)\\[(?\\w+)\\] \\[(?[^ \\]]+)\\s*(?: sub=(?.+?))?(?: opI(?:D|d)=(?[^ \\]]+))?(?: user=(?[\\w\\-:]+))?\\]\\s*(?.*)(?:\\n(?:.|\\n)*)?$" + "pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?\\w+) (?[\\w\\-]+)\\[(?\\w+)\\] \\[(?[^ \\]]+)\\s*(?: sub=(?.+?))?(?: opI(?:D|d)=(?[^ \\]]+))?(?: user=(?[^ \\]]+))?\\]\\s*(?.*)(?:\\n(?:.|\\n)*)?$" }, "section": { - "pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (ESX KMX Agent started.|Section for VMware VirtualCenter,.*|- time the service was last started, Section for (?:[^,]+), pid=(?\\w+).*)" + "pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?:- last log rotation time, \\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2}))?\\s*(ESX KMX Agent started.|Section for VMware VirtualCenter,.*|- time the service was last started, Section for (?:[^,]+), pid=(?\\w+).*)" }, "5.0+": { - "pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) \\[(?\\w+) (?\\w+) '(?[^']+)'(?: opID=(?[^ \\]]+))?(?: user=(?[\\w\\-]+))?\\](?.*)(?:\\n(?:.|\\n)*)?$" + "pattern": "^(?\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) \\[(?\\w+) (?\\w+) '(?[^']+)'(?: opID=(?[^ \\]]+))?(?: user=(?[^ \\]]+))?\\](?.*)(?:\\n(?:.|\\n)*)?$" }, "pre-5.0": { - "pattern": "^\\[(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}\\.\\d{3}) (?\\w+) (?\\w+) '(?[^']+)'(?: opID=(?[^ \\]]+))?(?: user=(?[\\w\\-]+))?\\](?.*)(?:\\n(?:.|\\n)*)?$" + "pattern": "^\\[(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}\\.\\d{3}) (?\\w+) (?\\w+) '(?[^']+)'(?: opID=(?[^ \\]]+))?(?: user=(?[^ \\]]+))?\\](?.*)(?:\\n(?:.|\\n)*)?$" }, "ls-log": { "pattern": "^\\[(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) (?[\\w\\-]+)\\s+(?\\w+)\\s+(?[^\\]]+)\\]\\s+(?(?:.|\\n)*)" @@ -82,6 +82,9 @@ } }, "sample": [ + { + "line": "2021-05-24T20:31:05.671Z - last log rotation time, 2021-05-24T09:30:02.683Z - time the service was last started, Section for VMware ESX, pid=1000080910, version=7.0.3, build=0, option=DEBUG" + }, { "line": "[2011-04-01 15:14:34.203 F5A5AB90 info 'vm:/vmfs/volumes/4d6579ec-23f981cb-465c-00237da0cfee/Vmotion-test/Vmotion-test.vmx' opID=F6FC49D5-000007E6-d] VMotionPrepare: dstMgmtIp=10.21.49.138" },