log4j.json

{
	"log4j" : {
		"title"			: "Java log format",
		"description"	: "Log format used by log4j and output by most java programs",
		"url"			: "",
		"regex" : {
			"twostamps"	: {
				"pattern" : "^(?<alert_level>\\w+)\\s+\\|\\s+(?<source>(?:jvm \\d+)|wrapper[p]?)\\s+\\|\\s(?<timestamp>\\d{4}/\\d{2}/\\d{2} \\d{2}:\\d{2}:\\d{2})\\s+\\| (?<timestamp_f>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2}(?:,\\d{3})?) \\[(?<function>\\w+-\\d+)\\]\\s+(?<debug_level>\\w+)\\s+(?<class>[\\w.]+)\\s+-\\s+(?<body>\\S.*)"
			},
			"onestamp"	: {
				"pattern" : "^(?<alert_level>\\w+)\\s+\\|\\s+(?<source>(?:jvm \\d+)|wrapper[p]?)\\s+\\|\\s(?<timestamp>\\d{4}/\\d{2}/\\d{2} \\d{2}:\\d{2}:\\d{2}(?:,\\d{3})?)\\s+\\|\\s+(?<body>\\S.*)$"
			},
			"tasko"	: {
				"pattern" : "^(?<timestamp>\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2},\\d{3}) \\[(?<function>\\w+-\\d+)\\]\\s+(?<alert_level>\\w+)\\s+(?<class>[\\w.]+)\\s+-\\s+(?<body>\\S.*)$"
			},
			"catalina" : {
				"pattern" : "^(?<timestamp>\\w{3} \\d{1,2}, \\d{4} \\d{2}:\\d{2}:\\d{2}(?:,\\d{3})? (?:AM|PM)) (?<source>(?:\\w+\\.)+\\w+) (?<function>\\w+)$"
			}
		},
		"level-field" : "alert_level",
		"level" : {
			"info"	: "STATUS",
			"error" : "ERROR",
			"warning" : "WARN",
			"debug" : "DEBUG",
			"info" : "INFO"
		},
		"value" : {
			"function" 		: { "kind" : "string", "identifier" : true },
			"alert_level"	: { "kind" : "string", "identifier" : true },
			"source"		: { "kind" : "string", "identifier" : true },
			"debug_level"	: { "kind" : "string", "identifier" : true },
			"class"			: { "kind" : "string", "identifier" : true },
			"body"			: { "kind" : "string" }
		},
		"sample" : [
			{
				"line" 	: "INFO   | jvm 1    | 2015/04/28 18:40:00 | 2015-04-28 18:40:00,077 [DefaultQuartzScheduler_Worker-8] INFO  com.redhat.rhn.taskomatic.TaskoJob - errata-queue-default: bunch errata-queue-bunch STARTED"
			},
			{
				"line"  : "INFO   | jvm 1    | 2015/04/28 18:34:18 | 2015-04-28 18:34:18,872 [Thread-46] DEBUG com.redhat.rhn.common.hibernate.ConnectionManager - Adding resource com/redhat/rhn/domain/action/ActionArchType.hbm.xml"
			},
			{
				"line" 	: "2015-05-22 16:10:00,123 [DefaultQuartzScheduler_Worker-5] INFO  com.redhat.rhn.taskomatic.task.ErrataCacheTask  - In the queue: 24"
			},
			{
				"line"	: "INFO   | jvm 1    | 2015/05/24 07:35:50 | JVMDUMP013I Processed dump event \"user\", detail \"\"."
			},
			{
				"line"	: "INFO   | jvm 1    | 2015/06/18 12:02:42 | Wrapper (Version 3.2.3) http://wrapper.tanukisoftware.org"
			},
			{
				"line"	: "DEBUG  | wrapperp | 2016/05/26 12:19:44 | send a packet PING : ping"
			},
			{
				"line"	: "Jun 14, 2016 11:16:27 AM org.apache.catalina.loader.WebappClassLoader clearThreadLocalMap"
			}
		]
	}
}