Home

If you like eslogd share your REGEX, FIELDS and a log sample with other administrators!

Apache access log

# 10.0.0.1 - - [11/Nov/2012:08:31:01 +0200] "GET /album/show/category/39/id/757 HTTP/1.1" 200 70023 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
FIELDS='host:string username password time:datetime method uri protocol version status bytes:integer referer agent vhost'
REGEX='^(\S+) (\S+) (\S+) \[(\S+ \S+)\] \"(\S+) (.*?) (\S+)\/(\S+)\" (\S+) (\S+) "([^"]*)" "([^"]*)" "([^"]*)"$'