2015-01-25 18:36:02 +01:00
|
|
|
# this configuration file is suitable for displaying kernel log files
|
|
|
|
|
2015-02-27 15:20:32 +01:00
|
|
|
|
|
|
|
# example of text substitution
|
|
|
|
#regexp=\bda?emon
|
|
|
|
#replace=angel
|
|
|
|
#colours=red
|
|
|
|
#======
|
|
|
|
# example of text substitution
|
2015-02-27 16:42:33 +01:00
|
|
|
#regexp=(\d\d):(\d\d):(\d\d)
|
|
|
|
#replace=\1h\2m\3s
|
|
|
|
#======
|
2015-02-27 15:20:32 +01:00
|
|
|
|
2015-01-25 18:36:02 +01:00
|
|
|
# display this line in yellow and stop further processing
|
|
|
|
regexp=.*last message repeated \d+ times$
|
|
|
|
colours=yellow
|
|
|
|
count=stop
|
|
|
|
======
|
2020-06-27 20:47:03 +02:00
|
|
|
# this is date and hostname
|
|
|
|
# 'Jun 3 22:44:55 neutronium '
|
|
|
|
# 'Jun 3 22:44:55 neutronium-02.my-domain.io '
|
|
|
|
regexp=^... (\d| )\d \d\d:\d\d:\d\d(\s[-.\w\d]+?\s)
|
2015-01-25 18:36:02 +01:00
|
|
|
colours=green, green, red
|
|
|
|
count=once
|
|
|
|
======
|
|
|
|
# everything in parentheses
|
2020-12-06 12:05:32 +01:00
|
|
|
regexp=\(.*?\)
|
2018-08-24 11:07:13 +02:00
|
|
|
colours=blue
|
2015-01-25 18:36:02 +01:00
|
|
|
count=more
|
|
|
|
======
|
|
|
|
# everything in `'
|
|
|
|
regexp=\`.+?\'
|
|
|
|
colours=bold yellow
|
|
|
|
count=more
|
|
|
|
======
|
2018-08-24 11:07:13 +02:00
|
|
|
# everything in "
|
2020-12-06 12:05:32 +01:00
|
|
|
regexp=\".*?\"
|
2018-08-24 11:07:13 +02:00
|
|
|
colours=blue
|
|
|
|
======
|
2015-01-25 18:36:02 +01:00
|
|
|
# this is probably a pathname
|
2018-08-24 11:07:13 +02:00
|
|
|
regexp=\s/[a-zA-Z_/\.\-\?\d\=\&]+
|
|
|
|
colours=blue
|
|
|
|
count=more
|
|
|
|
======
|
|
|
|
# everything in <>
|
|
|
|
regexp=\<.*?\>
|
|
|
|
colours=blue
|
2015-01-25 18:36:02 +01:00
|
|
|
count=more
|
|
|
|
======
|
|
|
|
# name of process and pid
|
|
|
|
regexp=([\w/\.\-]+)(\[\d+?\])
|
|
|
|
colours=bold blue, bold red
|
|
|
|
count=more
|
|
|
|
======
|
2020-12-12 12:50:25 +01:00
|
|
|
# IPv4 or IPv4:Port
|
|
|
|
regexp=\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(:\d{1,5})?
|
2018-08-24 11:07:13 +02:00
|
|
|
colours=bold yellow
|
2015-01-25 18:36:02 +01:00
|
|
|
count=more
|
|
|
|
======
|
2018-08-24 11:07:13 +02:00
|
|
|
# IPv6
|
|
|
|
regexp=\d(([0-9a-fA-F]{1,4})?\:\:?[0-9a-fA-F]{1,4})+
|
|
|
|
colours=bold yellow
|
|
|
|
=======
|
|
|
|
# Email address
|
|
|
|
regexp=[a-zA-z0-9\.\-\+]+\@[\w\-\.]+
|
|
|
|
colours=green
|
|
|
|
======
|
|
|
|
# HTTP verbs
|
|
|
|
regexp=GET|POST|PUT|DELETE|PATCH|HEAD
|
|
|
|
colours=green
|
|
|
|
======
|
|
|
|
# 2xx status
|
|
|
|
regexp=\s\b2\d{2}\b\s
|
|
|
|
colours=green
|
|
|
|
======
|
|
|
|
# 3xx status
|
|
|
|
regexp=\s\b3\d{2}\b\s
|
|
|
|
colours=yellow
|
|
|
|
======
|
|
|
|
# 4xx status
|
|
|
|
regexp=\s\b4\d{2}\b\s
|
|
|
|
colours=red
|
|
|
|
======
|
|
|
|
# 5xx status
|
|
|
|
regexp=\s\b5\d{2}\b\s
|
|
|
|
colours=red
|
|
|
|
======
|
|
|
|
# status deferred
|
|
|
|
regexp=status\=deferred|Connection refused
|
|
|
|
colours=red
|
|
|
|
======
|
2015-01-25 18:36:02 +01:00
|
|
|
# connect requires special attention
|
|
|
|
regexp=connect
|
|
|
|
colours=on_red
|
|
|
|
count=more
|