config.Mutator.json Maven / Gradle / Ivy

Go to download
[
  {
    "mutatorId": "Raw",
    "mutatorConfigType": "RAW"
  },
  {
    "mutatorId": "Json",
    "mutatorConfigType": "JSON"
  },
  {
    "mutatorId": "CommonLogFormat",
    "mutatorConfigType": "APACHE_ACCESS_LOG",
    "format": "%h %l %u %t \"%r\" %>s %b",
    "fieldConfig": {
      "format": {
        // %r = request
        "request": {
          "fields": [
            "requestMethod",
            "requestUrl",
            "requestProtocol"
          ],
          "mutatorConfigType": "DELIMITER"
        }
      },
      "rawData": true,
      "dateFormat": {
        "receivedTimestamp": {
          "dateFormatType": "CUSTOM",
          "format": "dd/MMM/yyyy:HH:mm:ss Z",
          "zoneOffset": "",
          "newFieldName": "@timestamp",
          "changeDateConfig": {
            "dateFormatType": "ISO"
          }
        }
      },
      "dataType": {
        "sizeByte": "NUMBER"
      }
    }
  },
  {
    "mutatorId": "CombinedLogFormat",
    "mutatorConfigType": "APACHE_ACCESS_LOG",
    "format": "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"",
    "fieldConfig": {
      "format": {
        // %r = request
        "request": {
          "fields": ["requestMethod", "requestUrl", "requestProtocol"],
          "mutatorConfigType": "DELIMITER"
        }
      },
      "rawData": true,
      "dateFormat": {
        "receivedTimestamp": {
          "dateFormatType": "CUSTOM",
          "format": "dd/MMM/yyyy:HH:mm:ss Z",
          "zoneOffset": "",
          "newFieldName": "@timestamp",
          "changeDateConfig": {
            "dateFormatType": "ISO"
          }
        }
      },
      "dataType": {
        "sizeByte": "NUMBER",
        "requestTime": "NUMBER"
      }
    }
  },
  {
    "mutatorId": "ApacheAccessLog",
    "mutatorConfigType": "APACHE_ACCESS_LOG",
    "format": "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D",
    "fieldConfig": {
      "format": {
        // %r = request
        "request": {
          "fields": [
            "requestMethod",
            "requestUrl",
            "requestProtocol"
          ],
          "mutatorConfigType": "DELIMITER"
        }
      },
      "rawData": true,
      "dateFormat": {
        "receivedTimestamp": {
          "dateFormatType": "CUSTOM",
          "format": "dd/MMM/yyyy:HH:mm:ss Z",
          "zoneOffset": "",
          "newFieldName": "@timestamp",
          "changeDateConfig": {
            "dateFormatType": "ISO"
          }
        }
      },
      "dataType": {
        "sizeByte": "NUMBER",
        "requestTime": "NUMBER"
      }
    }
  },
  {
    "mutatorId": "NginxAccessLog",
    "mutatorConfigType": "NGINX_ACCESS_LOG",
    "format": "$remote_addr - $remote_user [$time_local] \"$request\" $status $body_bytes_sent \"$http_referer\" \"$http_user_agent\"",
    "fieldNameMap": {
      "$remote_addr": "remoteHost",
      "$remote_user": "remoteUser",
      "$time_local": "timeLocal",
      "$request": "request",
      "$status": "statusCode",
      "$body_bytes_sent": "sizeByte",
      "$http_referer": "referer",
      "$http_user_agent": "userAgent"
    },
    "fieldConfig": {
      "format": {
        "request": {
          "fields": ["requestMethod", "requestUrl", "requestProtocol"],
          "mutatorConfigType": "DELIMITER"
        }
      },
      "dateFormat": {
        "timeLocal": {
          "dateFormatType": "CUSTOM",
          "format": "dd/MMM/yyyy:HH:mm:ss Z",
          "zoneOffset": "",
          "newFieldName": "@timestamp",
          "changeDateConfig": {
            "dateFormatType": "ISO"
          }
        }
      },
      "combinedFields": [
        {
          "targetFields": ["remoteHost", "requestUrl"],
          "combinedFieldName": "",
          "delimiter": "|"
        }
      ],
      "formulaFields": [
        {
          "targetFields": ["requestTime"],
          "combinedFieldName": "requestTimeInMicro",
          "delimiter": "",
          "formula": "requestTime / 1000",
          "defaultResult": null
        }
      ],
      "dataType": {
        "statusCode": "WORD",
        "userAgent": "WORD",
        "sizeByte": "NUMBER"
      },
      "unit": {
        "timeLocal": "Second"
      },
      "ignore": ["remoteUser", "remoteLogName"]
    }
  }
]