conf: parsers: add k8s-nginx-ingress-error parser

Author: nip-was-here

conf/parsers.conf

@@ -32,6 +32,14 @@
     Time_Key    time
     Time_Format %d/%b/%Y:%H:%M:%S %z
 
+[PARSER]
+    # https://rubular.com/r/2JylvlQcEw6lQa
+    Name        k8s-nginx-ingress-error
+    Format      regex
+    Regex       ^(?<time_local>\d{4}/\d{2}/\d{2}\ \d{2}:\d{2}:\d{2})\ \[(?<level>emerg|alert|crit|error|warn|notice|info)\]\ (?<process_id>\d+)\#(?<thread_id>\d+):\ \*(?<connection_id>\d+)\ (?<error>.+?)(?:\ while\ (?<context>.+?))?,\ client:\ (?<client_ip>(?:(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])|(?:(?:[0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,7}:|(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,5}(?::[0-9a-fA-F]{1,4}){1,2}|(?:[0-9a-fA-F]{1,4}:){1,4}(?::[0-9a-fA-F]{1,4}){1,3}|(?:[0-9a-fA-F]{1,4}:){1,3}(?::[0-9a-fA-F]{1,4}){1,4}|(?:[0-9a-fA-F]{1,4}:){1,2}(?::[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:(?:(?::[0-9a-fA-F]{1,4}){1,6})|:(?:(?::[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(?::[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(?:ffff(?::0{1,4}){0,1}:){0,1}(?:(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])|(?:[0-9a-fA-F]{1,4}:){1,4}:(?:(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9]))),\ server:\ (?<server>[^\s,]+)(?:,\ request:\ \"(?<method>[A-Z]+?)\ (?<path>[\/\S]+?)\ (?<protocol>.+?)\")?(?:,\ upstream:\ \"(?<upstream>.+?)\")?(?:,\ host:\ \"(?<host>.+?)\")?(?:\s*,\ referrer:\ \"(?<referrer>.+?)\")?$
+    Time_Key    time_local
+    Time_Format %Y/%m/%d %H:%M:%S
+
 [PARSER]
     Name   json
     Format json