Closed jgedeon120 closed 8 years ago
Changing the following in props.conf for cisco:ios
REPORT-cisco_ios-general = extract_cisco_ios-general, extract_cisco_ios-general-xr, extract_cisco_ios-general-xe, extract_cisco_ios-general-wlc, extract_cisco_ios-general-rfc5424
Then adding to transforms.conf: [extract_cisco_ios-general-xe] REGEX = ((?\S+)\s)?(?\d+):\s(?\d+):\s(?[.*])?(?.+):\s%(?IOSXE)-6-(?PLATFORM):(?\S+): QFP:(?\d+.\d+) Thread:(?\d+) TS:(?\d+) %(?[A-Z0-9]+)-((?[A-Z0-2](-?[A-Z][^-]_))-?)?(?[0-7])-(?[A-Z0-9_]+):\s(?.+)
Basic field extractions are being done as expected. Deeper extractions still need to be done.
Thanks. I updated the code with your contribution. Please test it :-)
Changing the following in props.conf for cisco:ios
REPORT-cisco_ios-general = extract_cisco_ios-general, extract_cisco_ios-general-xr, extract_cisco_ios-general-xe, extract_cisco_ios-general-wlc, extract_cisco_ios-general-rfc5424
Then adding to transforms.conf: [extract_cisco_ios-general-xe] REGEX = ((?\S+)\s)?(?\d+):\s(?\d+):\s(?[.*])?(?.+):\s%(?IOSXE)-6-(?PLATFORM):(?\S+): QFP:(?\d+.\d+) Thread:(?\d+) TS:(?\d+) %(?[A-Z0-9]+)-((?[A-Z0-2 ](-?[A-Z][^-]_))-?)?(?[0-7])-(?[A-Z0-9_]+):\s(?.+)
Basic field extractions are being done as expected. Deeper extractions still need to be done.