cscli parsers install Jgigantino31/mealie-logsParser for Mealie Logs.
1---2filenames:3 - /var/log/mealie.log4labels:5 type: mealie
1---2source: docker3container_name:4 - mealie5#container_id:6# - 843ee92d231b7labels:8 type: mealie
1onsuccess: next_stage2#debug: false3name: Jgigantino31/mealie-logs4description: "Parse mealie logs"5filter: "evt.Parsed.program == 'mealie'"6pattern_syntax:7 MEALIE_CUSTOMDATE: "%{YEAR}-%{MONTHNUM}-%{MONTHDAY}T%{HOUR}:%{MINUTE}:%{SECOND}"8nodes:9 - grok:10 pattern: 'ERROR %{MEALIE_CUSTOMDATE:timestamp} - Incorrect username or password from %{IP:source_ip}' # For logs collected directly from docker11 apply_on: message12 statics:13 - meta: log_type14 value: mealie_failed_auth15 - grok:16 pattern: '[ERROR|auth|L83] %{MEALIE_CUSTOMDATE:timestamp}: Incorrect username or password from %{IP:source_ip}' # For logs collected from log file17 apply_on: message18 statics:19 - meta: log_type20 value: mealie_failed_auth2122statics:23 - meta: service24 value: mealie25 - meta: source_ip26 expression: "evt.Parsed.source_ip"27 - target: evt.StrTime28 expression: evt.Parsed.timestamp29