# all options will be parsed as an array # modules are specified as 'name' in the module option # all modules need a 'name' = 'option1','option2'[,'option3'] # where the first option must be type of data source: # file or db # the second option must for file be the filename # and for db be database.table # for type db, we expect the database to be structured with # a sequence number as the field 'seq' # a 'program' field that must contain your third option, # a timestamp field # a single field with the log message from your service # this is based on the normal syslog-in-db format logfile = '/var/log/parser_filter.log' #Our logfile modules = 'dovecot','exim','ssh','apache','gitea','haproxy' #List of modules available #One entry per module, beware, no stray spaces allowed:) dovecot = 'file','/usr/local/jails/thinjails/dovecot/var/log/maillog' exim = 'file','/var/log/exim/mainlog' apache = 'file','/var/log/apache-error.log' ssh = 'db','syslog.logs','sshd' gitea = 'file','/usr/local/jails/thinjails/gitea/var/log/gitea/gitea.log' haproxy = 'file','/var/log/haproxy.log' #why we have the first entry here, I'm not too sure about, since the module itself also #needs to know what type of fetcher it wants. Ancient code is ancient. Undocumented ideas are bad:) #Configuration of the fetcher "db". We only support one database connection at this time #tables are specified in the above section dbhost = 'example.host' db = 'example.database' dbusr = 'example.user' dbpwd = 'example.password' #These values define arguments for File::Tail maxinterval = 2 interval = 1 resetafter = 60 tail = 0 reset_tail = 0 ##### THESE CAN'T CURRENTLY BE REMOVED ##### short = 15 long = 10080 allowed_rejects_short = 5 allowed_blocks_short = 1 allowed_rejects_long = 25 allowed_blocks_long = 5