| 1 | pattern: | |
| 2 | (?x) |
| 3 | ^(?P<APACHE_REMOTE_ADDR>[^ ]+) \s+ - \s+ (?P<APACHE_REMOTE_USER>[^ ]+) \s+ |
| 4 | \[(?P<APACHE_TIME_LOCAL>[^\]]+)\] \s+ |
| 5 | "(?P<MESSAGE>(?P<APACHE_METHOD>[A-Z]+) \s+ (?P<APACHE_URL>[^ ]+) \s+ HTTP/(?P<APACHE_HTTP_VERSION>[^"]+))" \s+ |
| 6 | (?P<APACHE_STATUS>\d+) \s+ |
| 7 | (?P<APACHE_BODY_BYTES_SENT>\d+) \s+ |
| 8 | "(?P<APACHE_HTTP_REFERER>[^"]*)" \s+ |
| 9 | "(?P<APACHE_HTTP_USER_AGENT>[^"]*)" |
| 10 | |
| 11 | prefix: APACHE_ |
| 12 | |
| 13 | inject: |
| 14 | - key: SYSLOG_IDENTIFIER |
| 15 | value: apache-access |
| 16 | - key: PRIORITY |
| 17 | value: 6 |