cscli parsers install Raithmir/zoraxy-logsA generic parser for Zoraxy. Zoraxy currently uses a single log for both access and errors.
1name: Raithmir/zoraxy-logs2description: "Parse Zoraxy logs"3filter: "evt.Parsed.program == 'zoraxy'"4onsuccess: next_stage5#debug: true6nodes:7 - grok:8 pattern: '\[%{TIMESTAMP_ISO8601:time_stamp}\] \[router:(?:host-http|whitelist|blacklist|subdomain-http|host-websocket|vdir-http|vdir-websocket|redirect|root-no_resp)\] \[origin:%{IPORHOST:target_server}?\] \[client: %{IPORHOST:remote_addr}\] \[useragent: %{DATA:http_user_agent}\] %{WORD:verb} %{DATA:request} %{NUMBER:status}'9 apply_on: message10 statics:11 - meta: log_type12 value: http_access-log13 - target: evt.StrTime14 expression: evt.Parsed.time_stamp1516statics:17 - meta: service18 value: http19 - meta: source_ip20 expression: evt.Parsed.remote_addr21 - meta: http_status22 expression: evt.Parsed.status23 - meta: http_path24 expression: evt.Parsed.request25 - meta: http_verb26 expression: evt.Parsed.verb27 - meta: http_user_agent28 expression: evt.Parsed.http_user_agent29 - meta: target_fqdn30 expression: evt.Parsed.target_server31