{ "$schema": "https://lnav.org/schemas/format-v1.schema.json", "openam_log": { "title": "OpenAM Log", "description": "The OpenAM identity provider.", "url": "http://openam.forgerock.org", "level-field": "level", "level": { "error": "ERROR", "warning": "WARNING", "info": "INFO", "critical": "SEVERE", "trace": "FINE|FINEST" }, "multiline": false, "regex": { "std": { "pattern": "^\"(?\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2})\"\\s+(?[^ \"]+|\"(?:[^\"]*|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]*|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")\\s+(?[^ \"]+|\"(?:[^\"]|\"\")*\")(?.*)$" } }, "value": { "data": { "kind": "quoted" }, "loginid": { "kind": "quoted", "identifier": true }, "contextid": { "kind": "quoted", "identifier": true }, "ipaddr": { "kind": "quoted", "identifier": true, "collate": "ipaddress" }, "domain": { "kind": "quoted", "identifier": true }, "loggedby": { "kind": "quoted", "identifier": true }, "messageid": { "kind": "quoted", "identifier": true }, "modulename": { "kind": "quoted", "identifier": true }, "nameid": { "kind": "quoted", "identifier": true }, "hostname": { "kind": "quoted", "identifier": true, "collate": "ipaddress" } }, "sample": [ { "line": "\"2014-06-14 17:08:39\" \"http://localhost:8086|/|\\nhttp://localhost:8086\\n\\nurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport\\n\" \"cn=dsameuser,ou=DSAME Users,dc=openam\" 8fc43a8f6a8c14101 \"Not Available\" INFO dc=openam \"cn=dsameuser,ou=DSAME Users,dc=openam\" SAML2-36 SAML2.access \"Not Available\" 127.0.1.1" }, { "line": "\"2014-06-09 14:49:56\" /etc/openam/openam/log/ \"cn=dsameuser,ou=DSAME Users,dc=openam\" 3d956febb91fed31 \"Not Available\" INFO dc=openam \"cn=dsameuser,ou=DSAME Users,dc=openam\" LOG-1 amPolicy.access \"Not Available\" 127.0.1.1" } ] } }