# this configuration file is suitable for displaying kernel log files # example of text substitution #regexp=\bda?emon #replace=angel #colours=red #====== # example of text substitution #regexp=(\d\d):(\d\d):(\d\d) #replace=\1h\2m\3s #====== # display this line in yellow and stop further processing regexp=.*last message repeated \d+ times$ colours=yellow count=stop ====== # this is date and hostname # 'Jun 3 22:44:55 neutronium ' # 'Jun 3 22:44:55 neutronium-02.my-domain.io ' regexp=^... (\d| )\d \d\d:\d\d:\d\d(\s[-.\w\d]+?\s) colours=green, green, red count=once ====== # everything in parentheses regexp=\(.*?\) colours=blue count=more ====== # everything in `' regexp=\`.+?\' colours=bold yellow count=more ====== # everything in " regexp=\".*?\" colours=blue ====== # this is probably a pathname regexp=\s/[a-zA-Z_/\.\-\?\d\=\&]+ colours=blue count=more ====== # everything in <> regexp=\<.*?\> colours=blue count=more ====== # name of process and pid regexp=([\w/\.\-]+)(\[\d+?\]) colours=bold blue, bold red count=more ====== # IPv4 or IPv4:Port regexp=\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(:\d{1,5})? colours=bold yellow count=more ====== # IPv6 regexp=(([0-9a-fA-F]{1,4})?\:\:?[0-9a-fA-F]{1,4})+ colours=bold yellow ======= # Email address regexp=[a-zA-z0-9\.\-\+]+\@[\w\-\.]+ colours=green ====== # HTTP verbs regexp=GET|POST|PUT|DELETE|PATCH|HEAD colours=green ====== # 2xx status regexp=\s\b2\d{2}\b\s colours=green ====== # 3xx status regexp=\s\b3\d{2}\b\s colours=yellow ====== # 4xx status regexp=\s\b4\d{2}\b\s colours=red ====== # 5xx status regexp=\s\b5\d{2}\b\s colours=red ====== # status deferred regexp=status\=deferred|Connection refused colours=red ====== # connect requires special attention regexp=connect colours=on_red count=more