diff --git a/Readme.md b/Readme.md new file mode 100644 index 0000000..981ec65 --- /dev/null +++ b/Readme.md @@ -0,0 +1,62 @@ +# logParser + +## Introduction + +LogParser is a java program ( 1.7+ only ) which use Grok Engine ( see [Plugin filter in Logstash](https://www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html) ) for parsing file and send extracted informations to InfluxDB. + +## How to deploy it + +To deploy it, you have to follow [this documentation](http://diqmqs.airfrance.fr/?p=2899) : and use the LogParser module. +Usage : java -jar logParser.jar -help +- application Input application name +- debug Active debug output message +- fromStart Read the file from start +- help Print this message +- info Active info output message +- logfile Input log path files +- paramfile Input a param file +- pattern Input pattern path file +- regex Name of the regex to apply +- version Print the version information and exit + +## Pattern file + +As logParser use Grok, you have to indicate a pattern file which contains all Grok pattern. +Example : +``` +USERNAME [a-zA-Z0-9._-]+ +USER %{USERNAME:UNWANTED} +INT (?:[+-]?(?:[0-9]+)) +BASE10NUM (?[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))) +NUMBER (?:%{BASE10NUM:UNWANTED}) +BASE16NUM (?