Patterns in log source extension documents
Rather than associating a regular expression directly with
a particular field name, patterns (patterns
) are
declared separately at the top of the extension document. These regex
patterns can be then referenced multiple times within the log source
extension file.
All characters between the start tag <pattern> and end tag </pattern> are considered part of the pattern. Do not use extra spaces or hard returns inside or around your pattern or <CDATA> expression. Extra characters or spaces can prevent the DSM extension from matching your intended pattern.
Pattern | Type | Description |
---|---|---|
|
String |
A regular string that is unique within the extension document. |
|
Boolean |
If true, the character case is ignored. For example, If not specified, this parameter defaults to false. |
|
Boolean |
If true, whitespace and carriage returns are ignored. If the CDATA sections are split onto different lines, any extra spaces and carriage returns are not interpreted as part of the pattern. If not specified, this parameter defaults to false. |
|
Boolean |
If true, the system uses Java Patterns for the Log Source Extension, instead of the more effective Adaptive Patterns. Set this option to true if Adaptive Patterns are providing inconsistent matching. If not specified, this parameter defaults to false. |