/
cisco_ucs_extractors
89 lines (89 loc) · 3.51 KB
/
cisco_ucs_extractors
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
{
"extractors": [
{
"title": "Cisco UCS CIMC Error",
"extractor_type": "grok",
"converters": [],
"order": 0,
"cursor_strategy": "copy",
"source_field": "message",
"target_field": "",
"extractor_config": {
"grok_pattern": "%{DATA:HOSTNAME} fault-engined\\: %{DATA:CISCO_UCS_STATUS_MSG}\\:\\[%{DATA:CISCO_UCS_EVENT_ID}\\]\\[%{DATA:CISCO_UCS_SEVERITY}\\]\\[%{DATA:CISCO_UCS_ERROR_MSG}\\]\\[%{DATA:CISCO_UCS_CHASIS_HW_LOCATION}\\] %{DATA:CISCO_UCS_SYSLOG_HW_MSG}\\:%{GREEDYDATA:CISCO_UCS_SYSLOG_HW_ERROR}"
},
"condition_type": "none",
"condition_value": ""
},
{
"title": "Cisco UCS Error Messages",
"extractor_type": "grok",
"converters": [],
"order": 0,
"cursor_strategy": "copy",
"source_field": "message",
"target_field": "",
"extractor_config": {
"grok_pattern": "%UCSM-2-%{DATA:CISCO_UCS_STATUS_MSG}\\: \\[%{DATA:CISCO_UCS_EVENT_ID}\\]\\[%{DATA:CISCO_UCS_SEVERITY}\\]\\[%{DATA:CISCO_UCS_ERROR_MSG}\\]\\[%{DATA:CISCO_UCS_CHASIS_HW_LOCATION}\\] %{GREEDYDATA:CISCO_UCS_FULL_MSG}"
},
"condition_type": "none",
"condition_value": ""
},
{
"title": "Cisco UCS CIMC Error 2 ",
"extractor_type": "grok",
"converters": [],
"order": 0,
"cursor_strategy": "copy",
"source_field": "message",
"target_field": "",
"extractor_config": {
"grok_pattern": "\\: %{DATA:application_name}\\:%{DATA:process_id}\\: # %{GREEDYDATA:CIMC_CODE_1} \\# %{DATA:CIMC_CODE_2} %{DATE_US} %{TIME} \\| %{DATA:CIMC_APP_TYPE} \\| %{GREEDYDATA:CISCO_UCS_ERROR_MSG} \\#%{DATA:CIMC_APP_CODE} \\| %{DATA:CISCO_UCS_SYSLOG_HW_ERROR} \\| %{GREEDYDATA:CIMC_STATE}"
},
"condition_type": "none",
"condition_value": ""
},
{
"title": "Cisco UCS CIMC Error 3",
"extractor_type": "grok",
"converters": [],
"order": 0,
"cursor_strategy": "copy",
"source_field": "message",
"target_field": "",
"extractor_config": {
"grok_pattern": "%{DATA:application_name}\\:%{DATA:process_id}\\: # %{GREEDYDATA:CIMC_CODE_1} \\# %{DATA:CIMC_CODE_2} %{DATE_US} %{TIME} UTC \\| %{DATA:CIMC_APP_TYPE} \\| %{GREEDYDATA:CISCO_UCS_ERROR_MSG} \\#%{DATA:CIMC_APP_CODE} \\| %{DATA:CISCO_UCS_SYSLOG_HW_ERROR} \\| %{GREEDYDATA:CIMC_STATE}"
},
"condition_type": "none",
"condition_value": ""
},
{
"title": "Cisco UCS Error Message 2",
"extractor_type": "grok",
"converters": [],
"order": 0,
"cursor_strategy": "copy",
"source_field": "message",
"target_field": "",
"extractor_config": {
"grok_pattern": "%UCSM-3-%{GREEDYDATA:CISCO_UCS_STATUS_MSG}\\: \\[%{DATA:CISCO_UCS_EVENT_ID}\\]\\[%{DATA:CISCO_UCS_SEVERITY}\\]\\[%{DATA:CISCO_UCS_ERROR_MSG}\\]\\[%{DATA:CISCO_UCS_CHASIS_HW_LOCATION}\\] %{GREEDYDATA:CISCO_UCS_FULL_MSG}"
},
"condition_type": "none",
"condition_value": ""
},
{
"title": "UCS Error Message 4",
"extractor_type": "grok",
"converters": [],
"order": 0,
"cursor_strategy": "copy",
"source_field": "message",
"target_field": "",
"extractor_config": {
"grok_pattern": "%UCSM-4-%{GREEDYDATA:CISCO_UCS_STATUS_MSG}\\: \\[%{DATA:CISCO_UCS_EVENT_ID}\\]\\[%{DATA:CISCO_UCS_SEVERITY}\\]\\[%{DATA:CISCO_UCS_ERROR_MSG}\\]\\[%{DATA:CISCO_UCS_CHASIS_HW_LOCATION}\\] %{GREEDYDATA:CISCO_UCS_FULL_MSG}"
},
"condition_type": "none",
"condition_value": ""
}
],
"version": "3.3.8"
}