pC_citrixcgatewaystrappnotificationdevicedown.md

Parser Content

{
Name = citrix-cgateway-str-app-notification-devicedown
  ParserVersion = v1.0.0
  Vendor = Citrix
  Product = Citrix Gateway
  TimeFormat = "MM/dd/yyyy:HH:mm:ss"
  Conditions = [ """ EVENT DEVICEDOWN """ ]
  Fields = [
    """({time}\d+\/\d+\/\d+:\d+:\d+:\d+)\s+GMT""",
    """GMT\s+({host}[^:\s]+)(\s\S+)?\s:\s+\w+\s+({event_name}(\w+\s+){2})[^:]+:\s+""",
    """GMT\s+({host}[^:\s]+)(\s\S+)?\s:\s+\w+\s+({event_name}(\w+\s+\w+))[^:]+:\s+""",
    """:\s+Device\s+"+({additional_info}.+?)\s+($|")"""
  ]
  DupFields = ["host->src_host"]


}