Hi,
I want to use REGEX and FORMAT strings for an xml sample as given without using KV_MODE=xml
So i am trying to use different regex to get hold of parsing fields but failing
Please find the sample log for your reference and help
<Interceptor>
<AttackCoords>-80.03107887624853,25.351308629611</AttackCoords>
<Outcome>Interdiction</Outcome>
<Infiltrators>6</Infiltrators>
<Enforcer>Assured</Enforcer>
<ActionDate>2013-11-03</ActionDate>
<ActionTime>04:40:00</ActionTime>
<RecordNotes>Infiltrators:
Savanna Carrera,
Gregoria Farías,
Julina Abeyta,
Mariquita Alonso,
Urbano Briseño,
Victoro Montano </RecordNotes>
<NumEscaped>3</NumEscaped>
<LaunchCoords></LaunchCoords>
<AttackVessel>Raft</AttackVessel>
</Interceptor>
<Interceptor>
<AttackCoords>-80.33045250710296,24.93574264936793</AttackCoords>
<Outcome>Interdiction</Outcome>
<Infiltrators>9</Infiltrators>
<Enforcer>Pompano</Enforcer>
<ActionDate>2013-05-04</ActionDate>
<ActionTime>04:22:00</ActionTime>
<RecordNotes></RecordNotes>
<NumEscaped>0</NumEscaped>
<LaunchCoords>-80.30497342463124,24.07890526980327</LaunchCoords>
<AttackVessel>Rustic</AttackVessel>
</Interceptor>
<Interceptor>
<AttackCoords>-79.94720757796837,24.82172611548247</AttackCoords>
<Outcome>Interdiction</Outcome>
<Infiltrators>12</Infiltrators>
<Enforcer>Barracuda</Enforcer>
<ActionDate>2013-01-01</ActionDate>
<ActionTime>05:22:00</ActionTime>
<RecordNotes>Infiltrators:
Cristian Caballero,
Vicenta Olivares,
Leonides Cintrón,
Ascencion Betancourt,
Alanzo Arenas,
Primeiro Sánchez,
Serena Monroy,
Madina Mojica,
Consolacion Cordero,
Faqueza Serrano,
Grazia Quesada,
Ivette Partida </RecordNotes>
<NumEscaped>0</NumEscaped>
<LaunchCoords></LaunchCoords>
<AttackVessel>Rustic</AttackVessel>
</Interceptor>
Props.conf
[dreamcrusher]
LINE_BREAKER = (\<Interceptor\>)
TIME_PREFIX = <ActionDate>
TIME_FORMAT = %Y-%m-%d<\/ActionDate>[\r\n]\t+<ActionTime>%H:%M:%S
SHOULD_LINEMERGE = false
MAX_DAYS_AGO = 2500
SEDCMD-aremoveheader = s/\<\?xml.*\s*\<dataroot\>\s*//g
SEDCMD-bremovefooter = s/\<\/dataroot\>//g
REPORT-f = dream_attack
KV_MODE = none
transforms.conf
[dream_attack]
REGEX = (?m)^[^<]+.(.*?)\>([\S\s]*?)\<(?=[^\s])
FORMAT = $1::$2
Please suggest to me why am I failing?
Thanks
... View more