Creating a rules-based adapter

A rule-based adapter uses regular expression rules to parse log file information and formats this information into the Common Base Event format. This type of adapter can usually be used for application log files that have a fixed log record format.

  1. Create the adapter configuration file.
  2. Configuring the context instance.
  3. Configure the sensor component.
  4. Configure the extractor component.
  5. Configure the parser component.
  6. Configure the outputter component.

For substitution rule examples and a regular expression grammar reference, see Substitution rule examples and Regular expression grammar, respectively.

Parent topic: Stand-alone Generic Log Adapter User's Guide