Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
View | Details | Raw Unified | Return to bug 160726
Collapse All | Expand All

(-)config/Windows/application/regex_example.adapter (-2 / +2 lines)
Lines 28-35 Link Here
28 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; application .\error.log"/>
 28 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; application .\error.log"/>
29 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; application .\error.log" directory="." fileName="error.log"/>
 29 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; application .\error.log" directory="." fileName="error.log"/>
30 
      </cc:Sensor>
 30 
      </cc:Sensor>
31 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 31 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
32 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 32 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
33 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 33 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
34 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 34 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
35 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 35 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
(-)config/Windows/application/regex.adapter (-4 / +4 lines)
Lines 30-37 Link Here
30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; application error.log"/>
 30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; application error.log"/>
31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; application error.log" directory="." fileName="error.log"/>
 31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; application error.log" directory="." fileName="error.log"/>
32 
      </cc:Sensor>
 32 
      </cc:Sensor>
33 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 33 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
34 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 34 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
Lines 107-118 Link Here
107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
 107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
108 
        <op:StandardOutOutputterType/>
 108 
        <op:StandardOutOutputterType/>
109 
      </cc:Outputter>
 109 
      </cc:Outputter>
110 
      <cc:Outputter description="CBE File Outputter" uniqueID="N9D6D6180E9D11DB8000DF587DEE0353" disabled="true" type="SingleFileOutputter">
 110 
      <cc:Outputter description="CBE File Outputter" disabled="true" uniqueID="N9D6D6180E9D11DB8000DF587DEE0353" type="SingleFileOutputter">
111 
        <pu:Property propertyName="directory" propertyValue="."/>
 111 
        <pu:Property propertyName="directory" propertyValue="."/>
112 
        <pu:Property propertyName="fileName" propertyValue="application.out"/>
 112 
        <pu:Property propertyName="fileName" propertyValue="application.out"/>
113 
        <op:SingleFileOutputterType directory="." fileName="application.out"/>
 113 
        <op:SingleFileOutputterType directory="." fileName="application.out"/>
114 
      </cc:Outputter>
 114 
      </cc:Outputter>
115 
      <cc:Outputter description="CBE Logging Agent Outputter" uniqueID="N2E800D80E9D11DB8000DF587DEE0353" disabled="true" type="LoggingAgentOutputter">
 115 
      <cc:Outputter description="CBE Logging Agent Outputter" disabled="true" uniqueID="N2E800D80E9D11DB8000DF587DEE0353" type="LoggingAgentOutputter">
116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
 116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
 117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
118 
      </cc:Outputter>
 118 
      </cc:Outputter>
(-)config/Windows/application/nl/regex.adapter (-4 / +4 lines)
Lines 30-37 Link Here
30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; application error.log"/>
 30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; application error.log"/>
31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; application error.log" directory="." fileName="error.log"/>
 31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; application error.log" directory="." fileName="error.log"/>
32 
      </cc:Sensor>
 32 
      </cc:Sensor>
33 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 33 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
34 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 34 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
Lines 107-118 Link Here
107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
 107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
108 
        <op:StandardOutOutputterType/>
 108 
        <op:StandardOutOutputterType/>
109 
      </cc:Outputter>
 109 
      </cc:Outputter>
110 
      <cc:Outputter description="CBE File Outputter" uniqueID="N9D6D6180E9D11DB8000DF587DEE0353" disabled="true" type="SingleFileOutputter">
 110 
      <cc:Outputter description="CBE File Outputter" disabled="true" uniqueID="N9D6D6180E9D11DB8000DF587DEE0353" type="SingleFileOutputter">
111 
        <pu:Property propertyName="directory" propertyValue="."/>
 111 
        <pu:Property propertyName="directory" propertyValue="."/>
112 
        <pu:Property propertyName="fileName" propertyValue="application.out"/>
 112 
        <pu:Property propertyName="fileName" propertyValue="application.out"/>
113 
        <op:SingleFileOutputterType directory="." fileName="application.out"/>
 113 
        <op:SingleFileOutputterType directory="." fileName="application.out"/>
114 
      </cc:Outputter>
 114 
      </cc:Outputter>
115 
      <cc:Outputter description="CBE Logging Agent Outputter" uniqueID="N2E800D80E9D11DB8000DF587DEE0353" disabled="true" type="LoggingAgentOutputter">
 115 
      <cc:Outputter description="CBE Logging Agent Outputter" disabled="true" uniqueID="N2E800D80E9D11DB8000DF587DEE0353" type="LoggingAgentOutputter">
116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
 116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
 117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
118 
      </cc:Outputter>
 118 
      </cc:Outputter>
(-)config/Windows/system/regex_example.adapter (-2 / +2 lines)
Lines 28-35 Link Here
28 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; system .\error.log"/>
 28 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; system .\error.log"/>
29 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; system .\error.log" directory="." fileName="error.log"/>
 29 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; system .\error.log" directory="." fileName="error.log"/>
30 
      </cc:Sensor>
 30 
      </cc:Sensor>
31 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 31 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
32 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 32 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
33 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 33 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
34 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 34 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
35 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 35 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
(-)config/Windows/system/regex.adapter (-4 / +4 lines)
Lines 30-37 Link Here
30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; system error.log"/>
 30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; system error.log"/>
31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; system error.log" directory="." fileName="error.log"/>
 31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; system error.log" directory="." fileName="error.log"/>
32 
      </cc:Sensor>
 32 
      </cc:Sensor>
33 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 33 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
34 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 34 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
Lines 107-118 Link Here
107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
 107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
108 
        <op:StandardOutOutputterType/>
 108 
        <op:StandardOutOutputterType/>
109 
      </cc:Outputter>
 109 
      </cc:Outputter>
110 
      <cc:Outputter description="CBE File Outputter" uniqueID="NABC73C10EA011DB8000DF587DEE0353" disabled="true" type="SingleFileOutputter">
 110 
      <cc:Outputter description="CBE File Outputter" disabled="true" uniqueID="NABC73C10EA011DB8000DF587DEE0353" type="SingleFileOutputter">
111 
        <pu:Property propertyName="directory" propertyValue="."/>
 111 
        <pu:Property propertyName="directory" propertyValue="."/>
112 
        <pu:Property propertyName="fileName" propertyValue="system.out"/>
 112 
        <pu:Property propertyName="fileName" propertyValue="system.out"/>
113 
        <op:SingleFileOutputterType directory="." fileName="system.out"/>
 113 
        <op:SingleFileOutputterType directory="." fileName="system.out"/>
114 
      </cc:Outputter>
 114 
      </cc:Outputter>
115 
      <cc:Outputter description="CBE Logging Agent Outputter" uniqueID="NC66C8680EA011DB8000DF587DEE0353" disabled="true" type="LoggingAgentOutputter">
 115 
      <cc:Outputter description="CBE Logging Agent Outputter" disabled="true" uniqueID="NC66C8680EA011DB8000DF587DEE0353" type="LoggingAgentOutputter">
116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
 116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
 117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
118 
      </cc:Outputter>
 118 
      </cc:Outputter>
(-)config/Windows/security/regex_example.adapter (-2 / +2 lines)
Lines 28-35 Link Here
28 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; security .\error.log"/>
 28 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; security .\error.log"/>
29 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; security .\error.log" directory="." fileName="error.log"/>
 29 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; security .\error.log" directory="." fileName="error.log"/>
30 
      </cc:Sensor>
 30 
      </cc:Sensor>
31 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 31 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
32 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 32 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
33 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 33 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
34 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 34 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
35 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 35 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
(-)config/Windows/security/regex.adapter (-4 / +4 lines)
Lines 30-37 Link Here
30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; security error.log"/>
 30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; security error.log"/>
31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; security error.log" directory="." fileName="error.log"/>
 31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; security error.log" directory="." fileName="error.log"/>
32 
      </cc:Sensor>
 32 
      </cc:Sensor>
33 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 33 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
34 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 34 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
Lines 107-118 Link Here
107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
 107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
108 
        <op:StandardOutOutputterType/>
 108 
        <op:StandardOutOutputterType/>
109 
      </cc:Outputter>
 109 
      </cc:Outputter>
110 
      <cc:Outputter description="CBE File Outputter" uniqueID="NAE64A180E9F11DB8000DF587DEE0353" disabled="true" type="SingleFileOutputter">
 110 
      <cc:Outputter description="CBE File Outputter" disabled="true" uniqueID="NAE64A180E9F11DB8000DF587DEE0353" type="SingleFileOutputter">
111 
        <pu:Property propertyName="directory" propertyValue="."/>
 111 
        <pu:Property propertyName="directory" propertyValue="."/>
112 
        <pu:Property propertyName="fileName" propertyValue="security.out"/>
 112 
        <pu:Property propertyName="fileName" propertyValue="security.out"/>
113 
        <op:SingleFileOutputterType directory="." fileName="security.out"/>
 113 
        <op:SingleFileOutputterType directory="." fileName="security.out"/>
114 
      </cc:Outputter>
 114 
      </cc:Outputter>
115 
      <cc:Outputter description="CBE Logging Agent Outputter" uniqueID="NC9FE0F80E9F11DB8000DF587DEE0353" disabled="true" type="LoggingAgentOutputter">
 115 
      <cc:Outputter description="CBE Logging Agent Outputter" disabled="true" uniqueID="NC9FE0F80E9F11DB8000DF587DEE0353" type="LoggingAgentOutputter">
116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
 116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
 117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
118 
      </cc:Outputter>
 118 
      </cc:Outputter>
(-)config/Windows/security/nl/regex.adapter (-4 / +4 lines)
Lines 30-37 Link Here
30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; security error.log"/>
 30 
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; security error.log"/>
31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; security error.log" directory="." fileName="error.log"/>
 31 
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; security error.log" directory="." fileName="error.log"/>
32 
      </cc:Sensor>
 32 
      </cc:Sensor>
33 
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>
 33 
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>
34 
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
 34 
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">
35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
 35 
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">
36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
 36 
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">
37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
 37 
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>
Lines 107-118 Link Here
107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
 107 
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">
108 
        <op:StandardOutOutputterType/>
 108 
        <op:StandardOutOutputterType/>
109 
      </cc:Outputter>
 109 
      </cc:Outputter>
110 
      <cc:Outputter description="CBE File Outputter" uniqueID="NAE64A180E9F11DB8000DF587DEE0353" disabled="true" type="SingleFileOutputter">
 110 
      <cc:Outputter description="CBE File Outputter" disabled="true" uniqueID="NAE64A180E9F11DB8000DF587DEE0353" type="SingleFileOutputter">
111 
        <pu:Property propertyName="directory" propertyValue="."/>
 111 
        <pu:Property propertyName="directory" propertyValue="."/>
112 
        <pu:Property propertyName="fileName" propertyValue="security.out"/>
 112 
        <pu:Property propertyName="fileName" propertyValue="security.out"/>
113 
        <op:SingleFileOutputterType directory="." fileName="security.out"/>
 113 
        <op:SingleFileOutputterType directory="." fileName="security.out"/>
114 
      </cc:Outputter>
 114 
      </cc:Outputter>
115 
      <cc:Outputter description="CBE Logging Agent Outputter" uniqueID="NC9FE0F80E9F11DB8000DF587DEE0353" disabled="true" type="LoggingAgentOutputter">
 115 
      <cc:Outputter description="CBE Logging Agent Outputter" disabled="true" uniqueID="NC9FE0F80E9F11DB8000DF587DEE0353" type="LoggingAgentOutputter">
116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
 116 
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>
117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
 117 
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>
118 
      </cc:Outputter>
 118 
      </cc:Outputter>
(-)src.native/converters/Reader.cpp (-12 / +13 lines)
Lines 36-41 Link Here
36 
const LPSTR cLocationTypePref = "LocationType: ";
 36 
const LPSTR cLocationTypePref = "LocationType: ";
37 
const LPSTR cLocationType = "Hostname";
 37 
const LPSTR cLocationType = "Hostname";
38 
const LPSTR cMessagesPref = "Message: ";
 38 
const LPSTR cMessagesPref = "Message: ";
39 
const LPSTR cSeparatorToken = "@;@";
39 

          40
          

        

        

          40
          
const LPSTR cErrorHeader = "<ACADErrorHeader>";

          41
          
const LPSTR cErrorHeader = "<ACADErrorHeader>";

        

        

          41
          

          42
          

        

  

    
      
            Lines 243-254
          
      
      
        Link Here
      
    
  

        

          243
          
	DWORD dwMSB16Zeros = 65535; // this double word variable has its first 16 bits as zero and the remaining as 1

          244
          
	DWORD dwMSB16Zeros = 65535; // this double word variable has its first 16 bits as zero and the remaining as 1

        

        

          244
          
	dwEventId &= dwMSB16Zeros;

          245
          
	dwEventId &= dwMSB16Zeros;

        

        

          245
          

          246
          

        

          
            

              246
              
	if(printf("%s%d;\t%s%d;\t%s%s;\t%s%s;\t%s%d;\t%s%08X;\t%s%s;\t%s%s;\t%s%s;\t%s%s;\n" ,cRecordNumberPref,


              247
              
	if(printf("%s%d%s\t%s%d%s\t%s%s%s\t%s%s%s\t%s%d%s\t%s%08X%s\t%s%s%s\t%s%s%s\t%s%s%s\t%s%s%s\n" ,cRecordNumberPref,

            

            

              247
              
		pevlr->RecordNumber, cEventTypePref, CBEseverity, cCreationTimePref,time,


              248
              
		pevlr->RecordNumber, cSeparatorToken,cEventTypePref, CBEseverity,cSeparatorToken, cCreationTimePref,time,cSeparatorToken,

            

            

              248
              
		cSourceComponentPref, (LPSTR) ((LPBYTE) pevlr + sizeof(EVENTLOGRECORD)),


              249
              
		cSourceComponentPref, (LPSTR) ((LPBYTE) pevlr + sizeof(EVENTLOGRECORD)),cSeparatorToken,

            

            

              249
              
		cEventCategoryPref, pevlr->EventCategory, cEventIDPref, dwEventId,


              250
              
		cEventCategoryPref, pevlr->EventCategory,cSeparatorToken, cEventIDPref, dwEventId,cSeparatorToken,

            

            

              250
              
		cUsernamePref, username, cComputerNamePref, compName, cLocationTypePref, cLocationType,


              251
              
		cUsernamePref, username,cSeparatorToken, cComputerNamePref, compName, cSeparatorToken,cLocationTypePref, cLocationType,cSeparatorToken,

            

            

              251
              
		cMessagesPref, stringsBuffer) < 0)


              252
              
		cMessagesPref, stringsBuffer,cSeparatorToken) < 0)

            

        

          252
          
	{

          253
          
	{

        

        

          253
          
		error("Failed to write event to output");

          254
          
		error("Failed to write event to output");

        

        

          254
          
		return FALSE;

          255
          
		return FALSE;

        

  

    
      
            Lines 256-267
          
      
      
        Link Here
      
    
  

        

          256
          

          257
          

        

        

          257
          

          258
          

        

        

          258
          
	if(fpOut)

          259
          
	if(fpOut)

        

          
            

              259
              
	if(fprintf(fpOut, "%s%d;\t%s%d;\t%s%s;\t%s%s;\t%s%d;\t%s%08X;\t%s%s;\t%s%s;\t%s%s;\t%s%s;\n" ,cRecordNumberPref,


              260
              
	if(fprintf(fpOut, "%s%d%s\t%s%d%s\t%s%s%s\t%s%s%s\t%s%d%s\t%s%08X%s\t%s%s%s\t%s%s%s\t%s%s%s\t%s%s%s\n" ,cRecordNumberPref,

            

            

              260
              
		pevlr->RecordNumber, cEventTypePref, CBEseverity, cCreationTimePref,time,


              261
              
		pevlr->RecordNumber, cSeparatorToken,cEventTypePref, CBEseverity,cSeparatorToken, cCreationTimePref,time,cSeparatorToken,

            

            

              261
              
		cSourceComponentPref, (LPSTR) ((LPBYTE) pevlr + sizeof(EVENTLOGRECORD)),


              262
              
		cSourceComponentPref, (LPSTR) ((LPBYTE) pevlr + sizeof(EVENTLOGRECORD)),cSeparatorToken,

            

            

              262
              
		cEventCategoryPref, pevlr->EventCategory, cEventIDPref, dwEventId,


              263
              
		cEventCategoryPref, pevlr->EventCategory,cSeparatorToken, cEventIDPref, dwEventId,cSeparatorToken,

            

            

              263
              
		cUsernamePref, username, cComputerNamePref, compName, cLocationTypePref, cLocationType,


              264
              
		cUsernamePref, username,cSeparatorToken, cComputerNamePref, compName, cSeparatorToken,cLocationTypePref, cLocationType,cSeparatorToken,

            

            

              264
              
		cMessagesPref, stringsBuffer) < 0)


              265
              
		cMessagesPref, stringsBuffer,cSeparatorToken) < 0)

            

        

          265
          
	{

          266
          
	{

        

        

          266
          
		error("Failed to write event to output file");

          267
          
		error("Failed to write event to output file");

        

        

          267
          
		return FALSE;

          268
          
		return FALSE;

        



(-)config/Windows/system/nl/regex.adapter
      (-4 / +4 lines)




  

    
      
            Lines 30-37
          
      
      
        Link Here
      
    
  

        

          30
          
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; system error.log"/>

          30
          
        <pu:Property propertyName="converter" propertyValue="&quot;eventlogreader.exe&quot; system error.log"/>

        

        

          31
          
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; system error.log" directory="." fileName="error.log"/>

          31
          
        <sensor:SingleFileSensor converter="&quot;eventlogreader.exe&quot; system error.log" directory="." fileName="error.log"/>

        

        

          32
          
      </cc:Sensor>

          32
          
      </cc:Sensor>

        

          
            

              33
              
      <ex:Extractor containsLineBreaks="true" description="This extractor uses regular expression  patterns to identify record delimiters" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:" uniqueID="N513CE9005B511D880008CD5D1F4FA98"/>


              33
              
      <ex:Extractor description="This extractor uses regular expression  patterns to identify record delimiters" uniqueID="N513CE9005B511D880008CD5D1F4FA98" containsLineBreaks="true" endPattern="" includeEndPattern="false" includeStartPattern="true" lineBreakSymbol="" replaceLineBreaks="false" startPattern="RecordNumber:"/>

            

            

              34
              
      <cc:Parser designationToken=":" separatorToken=";" uniqueID="N5218A3005B511D880008CD5D1F4FA98">


              34
              
      <cc:Parser designationToken=":" separatorToken="@;@" uniqueID="N5218A3005B511D880008CD5D1F4FA98">

            

        

          35
          
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">

          35
          
        <parser:RuleElement index="N5218A3105B511D880008CD5D1F4FA98" name="CommonBaseEvent">

        

        

          36
          
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">

          36
          
          <parser:RuleElement index="N196C78405B511D880008CD5D1F4FA98" name="sourceComponentId">

        

        

          37
          
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>

          37
          
            <parser:RuleAttribute defaultValue="Windows" index="N6FFE39105B511D880008CD5D1F4FA98" name="component" usePreviousMatchSubstitutionAsDefault="false"/>

        

  

    
      
            Lines 107-118
          
      
      
        Link Here
      
    
  

        

          107
          
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">

          107
          
      <cc:Outputter description="Static Parser Outputter" uniqueID="AdapterCBEOutputterID3" type="StandardOutOutputter">

        

        

          108
          
        <op:StandardOutOutputterType/>

          108
          
        <op:StandardOutOutputterType/>

        

        

          109
          
      </cc:Outputter>

          109
          
      </cc:Outputter>

        

          
            

              110
              
      <cc:Outputter description="CBE File Outputter" uniqueID="NABC73C10EA011DB8000DF587DEE0353" disabled="true" type="SingleFileOutputter">


              110
              
      <cc:Outputter description="CBE File Outputter" disabled="true" uniqueID="NABC73C10EA011DB8000DF587DEE0353" type="SingleFileOutputter">

            

        

          111
          
        <pu:Property propertyName="directory" propertyValue="."/>

          111
          
        <pu:Property propertyName="directory" propertyValue="."/>

        

        

          112
          
        <pu:Property propertyName="fileName" propertyValue="system.out"/>

          112
          
        <pu:Property propertyName="fileName" propertyValue="system.out"/>

        

        

          113
          
        <op:SingleFileOutputterType directory="." fileName="system.out"/>

          113
          
        <op:SingleFileOutputterType directory="." fileName="system.out"/>

        

        

          114
          
      </cc:Outputter>

          114
          
      </cc:Outputter>

        

          
            

              115
              
      <cc:Outputter description="CBE Logging Agent Outputter" uniqueID="NC66C8680EA011DB8000DF587DEE0353" disabled="true" type="LoggingAgentOutputter">


              115
              
      <cc:Outputter description="CBE Logging Agent Outputter" disabled="true" uniqueID="NC66C8680EA011DB8000DF587DEE0353" type="LoggingAgentOutputter">

            

        

          116
          
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>

          116
          
        <pu:Property propertyName="agentName" propertyValue="Default CBE Logging Agent"/>

        

        

          117
          
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>

          117
          
        <op:LoggingAgentOutputterType agentName="Default CBE Logging Agent"/>

        

        

          118
          
      </cc:Outputter>

          118
          
      </cc:Outputter>

        






  

  Return to bug 160726