second commit

ninjadude333 · Feb 4, 2018 · e02a617 · e02a617
1 parent 3983fae
commit e02a617
Show file tree

Hide file tree

Showing 6 changed files with 82,256 additions and 0 deletions.
diff --git a/LogFile Samples/dca/DCA.process.ContentFiltering.log b/LogFile Samples/dca/DCA.process.ContentFiltering.log
diff --git a/LogFile Samples/pvwa/CyberArk.WebApplication.log b/LogFile Samples/pvwa/CyberArk.WebApplication.log
diff --git a/LogFile Samples/pvwa/CyberArk.WebConsole.log b/LogFile Samples/pvwa/CyberArk.WebConsole.log
diff --git a/LogFile Samples/pvwa/CyberArk.WebTasksEngine.log b/LogFile Samples/pvwa/CyberArk.WebTasksEngine.log
diff --git a/LogFile Samples/vault/italog.log b/LogFile Samples/vault/italog.log
diff --git a/grok_for_dcaLog.notes.txt b/grok_for_dcaLog.notes.txt
@@ -0,0 +1,23 @@
+# DCA Logs
+DCA_COPYFROMTO .+?(?=\])
+DCA_RULE .+?(?=\])
+DCA_FILE \F.+?(?=\])
+DCA_MESSAGE .*
+DCA_SEPERATOR \s\|\s
+DCA_BETWEEN \s*\|\s*.+?(?=\|)
+
+"message" => "\[%{DATE:date}%{DCA_SEPERATOR}%{TIME:time}\]%{DCA_BETWEEN:fromto}%{DCA_BETWEEN:rule}%{DCA_BETWEEN:file}%{DCA_BETWEEN:colons}%{GREEDYDATA:msg}"
+
+\[%{DATE:date}%{DCA_SEPERATOR}%{TIME:time}\]%{DCA_BETWEEN:fromto}%{DCA_BETWEEN:rule}%{DCA_BETWEEN:file}%{DCA_BETWEEN:colons}%{GREEDYDATA:msg}
+
+
+grok for ITA LOG:
+%{DATESTAMP:date_and_time}\s%{WORD:action_code}\s%{GREEDYDATA:msg}
+
+grok for web logs
+DCA_PID .+?(?=\|)
+DCA_TID .+?(?=\|)
+
+
+
+\[%{DATE:date}%{DCA_SEPERATOR}%{TIME:time}\]%{DCA_SEPERATOR}%{DCA_PID:pid}%{DCA_SEPERATOR}%{DCA_TID:tid}%{DCA_BETWEEN:colon}%{DCA_SEPERATOR}%{DCA_MESSAGE:msg}