From aed9f10440d8789f99919c3a6f91e8d76bbc44dc Mon Sep 17 00:00:00 2001 From: Edward Rudd Date: Thu, 23 Oct 2008 06:29:36 +0000 Subject: more parsing implementation (Custom functions) initial DB inserting (w/ prepared query) --- (limited to 'utility/mod_log_sql.conf') diff --git a/utility/mod_log_sql.conf b/utility/mod_log_sql.conf index 72f0205..9730983 100644 --- a/utility/mod_log_sql.conf +++ b/utility/mod_log_sql.conf @@ -1,8 +1,9 @@ InputDirectory ./logs ErrorLog ./error_log -DBConnect mysql://username:host@server/database +DBDDriver mysql +DBDParams "host=localhost;user=root;dbname=apache_log" DBParam socketfile /tmp/mysql.sock -Table apache_logs +Table access_log MachineID 7of9 UseTransactions on LogLevel notice @@ -34,17 +35,18 @@ Linefilter - "BAD" PreFilter request - "GET \/images" PostFilter request_method "GET" -# Usage field datatype(size) source [function [param]...] -OutputField bytes_sent int bytes_sent -OutputField request_protocol varchar(10) request regexmatch "(HTTP\/[\d\.]+)$" -OutputField remote_host varchar(50) remhost -OutputField request_method varchar(25) request regexmatch "^(\w+)" -OutputField time_stamp int date totimestamp -OutputField status smallint status -OutputField request_uri varchar(255) request regexmatch "^\w+ (.+) \w+\.[\d\.]+$" -OutputField remote_user varchar(50) user -OutputField remote_logname varchar(50) ident -OutputField remote_time char(28) date +# Usage field datatype(size) default source [function [param]...] +OutputField bytes_sent int 0 bytes_sent +OutputField request_protocol varchar(10) "" request regexmatch "(HTTP/[\\d\\.]+)$" +OutputField remote_host varchar(50) "" remhost +OutputField request_method varchar(25) "" request regexmatch "^(\\w+)" +OutputField time_stamp int 0 date totimestamp +OutputField status smallint 0 status +OutputField request_uri varchar(255) "" request regexmatch "^\\w+ (.+) \\w+/[\\d\\.]+$" +OutputField remote_user varchar(50) "" user +OutputField remote_logname varchar(50) "" ident +OutputField request_time char(28) "" date regexmatch ".+" "[$0]" #Only used for Combined log input, if standard CLF input, they are ignored -OutputField agent varchar(255) agent -OutputField referer varchar(255) referer +OutputField agent varchar(255) "" agent +OutputField referer varchar(255) "" referer +OutputField machine_id varchar(25) "" "" machineid -- cgit v0.9.2