pC_vmwareviewstrapploginsuccessviewuser.md

Parser Content

{
Name = vmware-view-str-app-login-success-viewuser
  ParserVersion = v1.0.0
  Vendor = VMware
  Product = VMware View
  TimeFormat = "yyyy-MM-dd HH:mm:ss"
  Conditions = [ """View User""", """ has logged in""" ]
  Fields = [
    """\d\d:\d\d:\d\d\s+({host}[^\s]+)\s+View User""",
    """View User\s+(({domain}[^\\\s]+)\\+)?({user}[\w\.\-\!\#\^\~]{1,40}\$?)""",
    """({app}View)"""
   ]
ParserVersion = "v1.0.0"


}