pC_assetviewavcsvfiledownloadsuccess15091.md

Parser Content

{
Name = "assetview-av-csv-file-download-success-15091"
  Vendor = AssetView
  Product = AssetView
  TimeFormat = "yyyy-MM-dd HH:mm:ss.SSS"
  Conditions = [ """WEBダウンロード""", """15091""" ]
  Fields = [
    """("\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d.\d\d\d",)"({time}\d{4}-\d\d-\d\d \d\d:\d\d:\d\d.\d\d\d)",""",
    """("\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d.\d\d\d",){2}("[^"]*",){21}"({user}[\w\.\-\!\#\^\~]{1,40}\$?)"""",
    """("\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d.\d\d\d",){2}("[^"]*",){10}"({process_name}[^"]+)"""",
    """("\d\d\d\d-\d\d-\d\d\s\d\d:\d\d:\d\d.\d\d\d",){2}("[^"]*",){3}"({asset_id}[^"]+)"""",
  ]
  ParserVersion = "v1.0.0"


}