diff --git a/conf/parsers.conf b/conf/parsers.conf index 4914b0802ba..489438ff871 100644 --- a/conf/parsers.conf +++ b/conf/parsers.conf @@ -32,6 +32,14 @@ Time_Key time Time_Format %d/%b/%Y:%H:%M:%S %z +[PARSER] + # https://rubular.com/r/2JylvlQcEw6lQa + Name k8s-nginx-ingress-error + Format regex + Regex ^(?\d{4}/\d{2}/\d{2}\ \d{2}:\d{2}:\d{2})\ \[(?emerg|alert|crit|error|warn|notice|info)\]\ (?\d+)\#(?\d+):\ \*(?\d+)\ (?.+?)(?:\ while\ (?.+?))?,\ client:\ (?(?:(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])|(?:(?:[0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,7}:|(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,5}(?::[0-9a-fA-F]{1,4}){1,2}|(?:[0-9a-fA-F]{1,4}:){1,4}(?::[0-9a-fA-F]{1,4}){1,3}|(?:[0-9a-fA-F]{1,4}:){1,3}(?::[0-9a-fA-F]{1,4}){1,4}|(?:[0-9a-fA-F]{1,4}:){1,2}(?::[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:(?:(?::[0-9a-fA-F]{1,4}){1,6})|:(?:(?::[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(?::[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(?:ffff(?::0{1,4}){0,1}:){0,1}(?:(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])|(?:[0-9a-fA-F]{1,4}:){1,4}:(?:(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(?:25[0-5]|(?:2[0-4]|1{0,1}[0-9]){0,1}[0-9]))),\ server:\ (?[^\s,]+)(?:,\ request:\ \"(?[A-Z]+?)\ (?[\/\S]+?)\ (?.+?)\")?(?:,\ upstream:\ \"(?.+?)\")?(?:,\ host:\ \"(?.+?)\")?(?:\s*,\ referrer:\ \"(?.+?)\")?$ + Time_Key time_local + Time_Format %Y/%m/%d %H:%M:%S + [PARSER] Name json Format json