Revision 6eb2dbe0
Added by Jim Pingle about 9 years ago
| src/etc/inc/filter_log.inc | ||
|---|---|---|
| 114 | 114 |
|
| 115 | 115 |
|
| 116 | 116 |
# Construct RegEx for specific log file type. |
| 117 |
if ($logfile_type == 'firewall') {
|
|
| 117 |
if ($logfile_type == 'firewall') {
|
|
| 118 | 118 |
$pattern = "filterlog:"; |
| 119 | 119 |
} |
| 120 |
else if ($logfile_type == 'system') {
|
|
| 120 |
else if ($logfile_type == 'system') {
|
|
| 121 | 121 |
$pattern = "^" . $date_pattern . "\ +" . $host_pattern . "\ +" . $process_pid_pattern . "\ +" . $log_message_pattern . "$"; |
| 122 | 122 |
} |
| 123 | 123 |
|
| 124 |
else if ($logfile_type == 'vpn_login') {
|
|
| 124 |
else if ($logfile_type == 'vpn_login') {
|
|
| 125 | 125 |
$action_pattern = "\(.*?\)"; |
| 126 | 126 |
$type_pattern = "\(.*?\)"; |
| 127 | 127 |
$ip_address_pattern = "\(.*?\)"; |
| 128 | 128 |
$user_pattern = "\(.*?\)"; |
| 129 | 129 |
$pattern = "^" . $date_pattern . "\ +" . $host_pattern . "\ +" . $process_pattern . "\ +" . $action_pattern . "\,\ *" . $type_pattern . "\,\ *" . $ip_address_pattern . "\,\ *" . $user_pattern . "$"; |
| 130 | 130 |
} |
| 131 |
else if ($logfile_type == 'vpn_service') {
|
|
| 131 |
else if ($logfile_type == 'vpn_service') {
|
|
| 132 | 132 |
$type_pattern = "\(.*?\):"; |
| 133 | 133 |
$pid_pattern = "\(?:process\ +\([0-9:]*\)\)?"; |
| 134 | 134 |
$pattern = "^" . $date_pattern . "\ +" . $host_pattern . "\ +" . $type_pattern . "\ +" . $pid_pattern . "\ *" . $log_message_pattern . "$"; |
| 135 | 135 |
} |
| 136 |
else if ($logfile_type == 'unknown') {
|
|
| 136 |
else if ($logfile_type == 'unknown') {
|
|
| 137 | 137 |
$pattern = "^" . $date_pattern . "\ +" . $log_message_pattern . "$"; |
| 138 | 138 |
} |
| 139 |
else {
|
|
| 139 |
else {
|
|
| 140 | 140 |
$pattern = "^\(.*\)$"; |
| 141 | 141 |
} |
| 142 | 142 |
|
Also available in: Unified diff
Whitespace fixes