Skip to content

Instantly share code, notes, and snippets.

@michaelcoyote
Created July 9, 2026 05:53
Show Gist options
  • Select an option

  • Save michaelcoyote/25471e4d4ccdfee16ceb188a68db7529 to your computer and use it in GitHub Desktop.

Select an option

Save michaelcoyote/25471e4d4ccdfee16ceb188a68db7529 to your computer and use it in GitHub Desktop.
SecPod Saner Agent lnav log format config
{
"$schema": "https://lnav.org/schemas/format-v1.schema.json",
"spsaneragent_log": {
"title": "spsaneragent",
"file-pattern": "spsaneragent*",
"description": "Format file generated from regex101 entry -- https://regex101.com/r/TRyCYX",
"regex": {
"std": {
"pattern": "^(?<timestamp>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}\\.\\d{3}\\([+-]\\d{2}:\\d{2}\\))\\ \\[(?<pid>\\d{2,9})\\:(?<tid>\\d{2,9})\\:(?<level>[IDWET])\\]\\ (?<body>.*)"
}
},
"value": {
"level": { "kind": "string", "identifier": true },
"timestamp": { "kind": "string" },
"pid": { "kind": "integer", "foreign-key": true },
"tid": { "kind": "integer", "foreign-key": true, "identifier": true },
"body" : { "kind" : "string" }
},
"sample": [
{
"line": "2026-02-06 16:17:32.321(-05:00) [599031:600035:D] [AncorInterface]"
}
],
"timestamp-format": ["%Y-%m-%d %H:%M:%S.%L(%z)"],
"thread-id-field": "tid"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment