The apache2
parser plugin parses apache2 logs.
If you want to keep time field in the record, set true
. Default is false
.
This is regexp and time format patterns of this plugin:
format /^(?<host>[^ ]*) [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$/time_format %d/%b/%Y:%H:%M:%S %z
host
, user
, method
, path
, code
, size
, referer
and agent
are included in the event record. time
is used for the event time.
code
and size
fields are converted into integer type automatically. And if the field value is -
, it is interpreted as nil
. See "Result Example".
192.168.0.1 - - [28/Feb/2013:12:00:00 +0900] "GET / HTTP/1.1" 200 777 "-" "Opera/12.0"
This incoming event is parsed as:
time:1362020400 (28/Feb/2013:12:00:00 +0900)​record:{"user" : nil,"method" : "GET","code" : 200,"size" : 777,"host" : "192.168.0.1","path" : "/","referer": nil,"agent" : "Opera/12.0"}
If this article is incorrect or outdated, or omits critical information, please let us know. Fluentd is a open source project under Cloud Native Computing Foundation (CNCF). All components are available under the Apache 2 License.