Skip to content
Snippets Groups Projects
Commit 132ce3e5 authored by jurgenhaas's avatar jurgenhaas
Browse files

Change apache access log regex for host/ip being encapsulated by quotes

parent 1875795f
Branches
No related tags found
No related merge requests found
......@@ -82,7 +82,7 @@
path /var/log/apache2/*access*.log
<parse>
@type regexp
expression /^(?<host>[^ ]*) [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$/
expression /^"(?<host>[^\"]*)" [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$/
time_format %d/%b/%Y:%H:%M:%S %z
</parse>
pos_file /var/log/td-agent/apache.access.log.pos
......@@ -104,7 +104,7 @@
path {{ jailroot|default('/jails') }}/{{ drupal.jail.name }}/var/log/apache2/*access*.log
<parse>
@type regexp
expression /^(?<host>[^ ]*) [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$/
expression /^"(?<host>[^\"]*)" [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$/
time_format %d/%b/%Y:%H:%M:%S %z
</parse>
pos_file /var/log/td-agent/{{ drupal.jail.name }}.apache.access.log.pos
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment