infra/ansible/roles/fluentbit/templates/parsers.conf.j2

11 lines
461 B
Django/Jinja

# {{ ansible_managed | default('Managed by Ansible') }}
# Syslog parser for mixed network gear (MikroTik, Ubiquiti, Cambium, etc.)
# Handles both standard RFC 3164 and bare/partial formats.
[PARSER]
Name syslog-loose
Format regex
Regex ^(\<(?<pri>[0-9]+)\>)?((?<time>[A-Z][a-z]{2}\s+\d+\s+\d{2}:\d{2}:\d{2})\s+(?<host>\S+)\s+)?(?<ident>\S+)\s+(?<message>.*)$
Time_Key time
Time_Format %b %d %H:%M:%S
Time_Keep On