Skip to content

Instantly share code, notes, and snippets.

@lennartkoopmann
Created August 17, 2013 13:23
Show Gist options
  • Save lennartkoopmann/6256824 to your computer and use it in GitHub Desktop.
Save lennartkoopmann/6256824 to your computer and use it in GitHub Desktop.
}lennart ~/workspace/graylog2/graylog2-server(020)$ curl -XGET http://localhost:12900/system/inputs/7ff46eb0-7306-4dc9-b05e-3301392e17d8/extractors?pretty=true -p0
{
"total" : 6,
"extractors" : [ {
"target_field" : "message",
"id" : "7dd7def2-d48b-4a8d-9ce6-323c65e5ad38",
"title" : "Extract actual message",
"metrics" : {
"time" : {
"std_dev" : 40,
"min" : 78,
"max" : 250,
"95th_percentile" : 230,
"98th_percentile" : 250,
"mean" : 118,
"99th_percentile" : 250
},
"duration_unit" : "microseconds",
"rate" : {
"total" : 27,
"five_minute" : 0.0,
"mean" : 5.9694747591814386,
"one_minute" : 0.0,
"fifteen_minute" : 0.0
},
"rate_unit" : "events/second"
},
"extractor_config" : {
"regex_value" : "\\]: (.+)"
},
"source_field" : "message",
"converters" : [ ],
"creator_user_id" : "foo-bar-userid",
"cursor_strategy" : "cut",
"type" : "regex"
}, {
"target_field" : "pid",
"id" : "b59714b1-0451-4fd9-bc3e-121f26c31955",
"title" : "PID",
"metrics" : {
"time" : {
"std_dev" : 83,
"min" : 50,
"max" : 498,
"95th_percentile" : 337,
"98th_percentile" : 498,
"mean" : 82,
"99th_percentile" : 498
},
"duration_unit" : "microseconds",
"rate" : {
"total" : 27,
"five_minute" : 0.0,
"mean" : 5.96884264141183,
"one_minute" : 0.0,
"fifteen_minute" : 0.0
},
"rate_unit" : "events/second"
},
"extractor_config" : {
"regex_value" : "\\[(.+)\\]"
},
"source_field" : "message",
"converters" : [ {
"config" : { },
"type" : "numeric"
} ],
"creator_user_id" : "foo-bar-userid",
"cursor_strategy" : "copy",
"type" : "regex"
}, {
"target_field" : "timestamp",
"id" : "92eb967c-2562-4f13-b363-e2b52c961699",
"title" : "timestamp overwriting",
"metrics" : {
"time" : {
"std_dev" : 1560,
"min" : 184,
"max" : 8343,
"95th_percentile" : 5137,
"98th_percentile" : 8343,
"mean" : 538,
"99th_percentile" : 8343
},
"duration_unit" : "microseconds",
"rate" : {
"total" : 27,
"five_minute" : 0.0,
"mean" : 5.968466601455643,
"one_minute" : 0.0,
"fifteen_minute" : 0.0
},
"rate_unit" : "events/second"
},
"extractor_config" : {
"end_index" : 29,
"begin_index" : 4
},
"source_field" : "message",
"converters" : [ {
"config" : {
"date_format" : "MMM dd yyyy hh:mmaa (SSS)"
},
"type" : "date"
} ],
"creator_user_id" : "foo-bar-userid",
"cursor_strategy" : "copy",
"type" : "substring"
}, {
"target_field" : "level",
"id" : "cf53579e-aae7-4cea-8d13-275fe9e3f1a7",
"title" : "Level",
"metrics" : {
"time" : {
"std_dev" : 84,
"min" : 52,
"max" : 491,
"95th_percentile" : 374,
"98th_percentile" : 491,
"mean" : 98,
"99th_percentile" : 491
},
"duration_unit" : "microseconds",
"rate" : {
"total" : 27,
"five_minute" : 0.0,
"mean" : 5.978646930341235,
"one_minute" : 0.0,
"fifteen_minute" : 0.0
},
"rate_unit" : "events/second"
},
"extractor_config" : {
"regex_value" : "<(.+)>"
},
"source_field" : "message",
"converters" : [ {
"config" : { },
"type" : "syslog_pri_level"
} ],
"creator_user_id" : "foo-bar-userid",
"cursor_strategy" : "copy",
"type" : "regex"
}, {
"target_field" : "application_name",
"id" : "f0e47240-68ea-4fbc-be13-97ff179d095c",
"title" : "Application name",
"metrics" : {
"time" : {
"std_dev" : 108,
"min" : 34,
"max" : 317,
"95th_percentile" : 312,
"98th_percentile" : 317,
"mean" : 154,
"99th_percentile" : 317
},
"duration_unit" : "microseconds",
"rate" : {
"total" : 27,
"five_minute" : 0.0,
"mean" : 5.978591328739708,
"one_minute" : 0.0,
"fifteen_minute" : 0.0
},
"rate_unit" : "events/second"
},
"extractor_config" : {
"regex_value" : ".{40}\\s(.+)\\["
},
"source_field" : "message",
"converters" : [ ],
"creator_user_id" : "foo-bar-userid",
"cursor_strategy" : "copy",
"type" : "regex"
}, {
"target_field" : "facility",
"id" : "3cd81302-8bfa-483c-a346-9d40b3525e6b",
"title" : "Facility",
"metrics" : {
"time" : {
"std_dev" : 34,
"min" : 50,
"max" : 184,
"95th_percentile" : 172,
"98th_percentile" : 184,
"mean" : 85,
"99th_percentile" : 184
},
"duration_unit" : "microseconds",
"rate" : {
"total" : 27,
"five_minute" : 0.0,
"mean" : 5.978208764806861,
"one_minute" : 0.0,
"fifteen_minute" : 0.0
},
"rate_unit" : "events/second"
},
"extractor_config" : {
"regex_value" : "<(.+)>"
},
"source_field" : "message",
"converters" : [ {
"config" : { },
"type" : "syslog_pri_facility"
} ],
"creator_user_id" : "foo-bar-userid",
"cursor_strategy" : "copy",
"type" : "regex"
} ]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment