/usr/share/logsparser/normalizers/common_tagTypes.xml is in python-logsparser 0.4-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 | <?xml version="1.0" encoding="UTF-8"?>
<!--++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-->
<!-- -->
<!-- pylogparser - Logs parsers python library -->
<!-- Copyright (C) 2011 Wallix Inc. -->
<!-- -->
<!--++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-->
<!-- -->
<!-- This package is free software; you can redistribute -->
<!-- it and/or modify it under the terms of the GNU Lesser -->
<!-- General Public License as published by the Free Software -->
<!-- Foundation; either version 2.1 of the License, or (at -->
<!-- your option) any later version. -->
<!-- -->
<!-- This package is distributed in the hope that it will be -->
<!-- useful, but WITHOUT ANY WARRANTY; without even the implied -->
<!-- warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -->
<!-- PURPOSE. See the GNU Lesser General Public License for -->
<!-- more details. -->
<!-- -->
<!-- You should have received a copy of the GNU Lesser General -->
<!-- Public License along with this package; if not, write -->
<!-- to the Free Software Foundation, Inc., 59 Temple Place, -->
<!-- Suite 330, Boston, MA 02111-1307 USA -->
<!-- -->
<!--++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-->
<!DOCTYPE tagTypes [
<!ELEMENT tagTypes (tagType+)>
<!ELEMENT tagType (description?,regexp,callbacks?)>
<!ATTLIST tagType name CDATA #REQUIRED>
<!ATTLIST tagType type (integer|float|basestring|datetime) "basestring">
<!ELEMENT regexp (#PCDATA)>
<!ELEMENT callbacks (callback+)>
<!ELEMENT callback (#PCDATA)>
<!ELEMENT description (localized_desc+)>
<!ELEMENT localized_desc (#PCDATA)>
<!ATTLIST localized_desc language CDATA #REQUIRED>
]>
<!-- Definition of most common tag types. -->
<tagTypes>
<tagType name="Anything" type="basestring">
<description>
<localized_desc language="en">Matches everything and anything.</localized_desc>
<localized_desc language="fr">Chaîne de caractères de longueur arbitraire.</localized_desc>
</description>
<regexp>.*</regexp>
</tagType>
<tagType name="Integer" type="integer">
<description>
<localized_desc language="en">Matches a variable-length integer.</localized_desc>
<localized_desc language="fr">Entier positif.</localized_desc>
</description>
<regexp>\d+</regexp>
</tagType>
<tagType name="EpochTime" type="float">
<description>
<localized_desc language="en">Matches an EPOCH timestamp or a positive decimal number.</localized_desc>
<localized_desc language="fr">Horodatage au format EPOCH, ou nombre décimal positif.</localized_desc>
</description>
<regexp>\d+(?:.\d*)?</regexp>
</tagType>
<tagType name="syslogDate" type="datetime">
<description>
<localized_desc language="en">Expression matching syslog dates.</localized_desc>
<localized_desc language="fr">Date au format syslog.</localized_desc>
</description>
<regexp>[A-Z][a-z]{2} [ 0-9]\d \d{2}:\d{2}:\d{2}</regexp>
</tagType>
<tagType name="URL" type="basestring">
<description>
<localized_desc language="en">Matches an URL.</localized_desc>
<localized_desc language="fr">Correspond à une URL (http/https).</localized_desc>
</description>
<regexp>http[s]?://[^ "'*]+</regexp>
</tagType>
<tagType name="MACAddress" type="basestring">
<description>
<localized_desc language="en">Matches a MAC address.</localized_desc>
<localized_desc language="fr">Correspond à une adresse MAC.</localized_desc>
</description>
<regexp>[0-9a-fA-F]{2}:(?:[0-9a-fA-F]{2}:){4}[0-9a-fA-F]{2}</regexp>
</tagType>
<tagType name="Email" type="basestring">
<description>
<localized_desc language="en">Matches an E-mail address.</localized_desc>
<localized_desc language="fr">Correspond à une adresse e-mail.</localized_desc>
</description>
<regexp>[a-zA-Z0-9+_\-\.]+@[0-9a-zA-Z][.-0-9a-zA-Z]*.[a-zA-Z]+</regexp>
</tagType>
<tagType name="IP" type="basestring">
<description>
<localized_desc language="en">Matches a numeric IP.</localized_desc>
<localized_desc language="fr">Correspond à une adresse IP numérique.</localized_desc>
</description>
<regexp>(?<![.0-9])(?:\d{1,3}.){3}\d{1,3}(?![.0-9])</regexp>
</tagType>
<tagType name="ZuluTime" type="basestring">
<description>
<localized_desc language="en">Matches a date written in Zulu Time</localized_desc>
<localized_desc language="fr">Correspond à une date exprimée au format "Zulu" ou UTC.</localized_desc>
</description>
<regexp>\d{4}-\d{2}-\d{2}(?:T\d{1,2}:\d{2}(?::\d{2}(?:[.]\d{1,5})?)?)?</regexp>
</tagType>
</tagTypes>
|