From 6f15e47ff35480f3dae731f9379e8cf3592b761e Mon Sep 17 00:00:00 2001
From: "Pellin, Frederic (DI QM QS) - AF" <frpellin@airfrance.fr>
Date: Fri, 13 Oct 2017 10:27:10 +0200
Subject: [PATCH] update with bob example

---
 Readme.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Readme.md b/Readme.md
index 981ec65..98a8dd0 100644
--- a/Readme.md
+++ b/Readme.md
@@ -34,6 +34,7 @@ BASE16FLOAT \b(?<![0-9A-Fa-f.])(?:[+-]?(?:0x)?(?:(?:[0-9A-Fa-f]+(?:\.[0-9A-Fa-f]
 LOGLEVEL ([A|a]lert|ALERT|[T|t]race|TRACE|[D|d]ebug|DEBUG|[N|n]otice|NOTICE|[I|i]nfo|INFO|[W|w]arn?(?:ing)?|WARN?(?:ING)?|[E|e]rr?(?:or)?|ERR?(?:OR)?|[C|c]rit?(?:ical)?|CRIT?(?:ICAL)?|[F|f]atal|FATAL|[S|s]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?)
 LOGLEVELERROR [E|e]rr?(?:or)?|ERR?(?:OR)?
 COSMOS .* %{LOGLEVELERROR:type} %{GREEDYDATA:message}
+BOB_MSG ^%{WORD:event},\d+,\S+,%{NUMBER:mqtime_value},%{NUMBER:integration_value},%{NUMBER:transformation_value},ID.*
 ```
 The first part indicate the name of the pattern et the second the pattern ( *mostly regex format* ).  
 Each pattern could be rename with the syntax indicate in the last line of the example ( *i.e : %{GREEDYDATA:message}* ).  
@@ -50,6 +51,7 @@ Example :
 ```
 #Application LogFilePath FileName GrokName
 repind /app/qal/REPIND/MAIN/tomcat7/s*/logs/appli/   .log  REPIND
+bob_mess        /app/qal/BOBCORE/*/tomcat7/s1/logs/appli        bobmess.*.log   BOB_MSG
 ```
 Each parameter is separate by a tabulation.  
 Application = name of the application send as a tag to influxdb.  
@@ -59,4 +61,4 @@ GrokName = Name of the grok patternto apply on the file.
 
 ## Influxdb
 
-All extracted metrics are sended to the "qualif" database on the "one_week" retention each second. ( For now it's not parametable )
\ No newline at end of file
+All extracted metrics are sended to the "qualif" database on the "one_week" retention each second. ( For now it's not parametable )