Skip to main content

Fields

The following table lists the various LXCA fields that are used in the vRLI:

Field nameRegexNotes
lenovo_lxca_classLetters, Digits, and Underscores and \w+Pre and post context(regexes)are "class=" and " " and Additional context is "LXCA"
lenovo_lxca_common_event_idLetters, Digits, and Underscores and\w+Pre and post context(regexes)are "CommonEventID=" and " " and Additional context is "LXCA"
lenovo_lxca_event_idAny Character except whitespace and \S+Pre and post context(regexes)are "EventID=" and " " and Additional context is "LXCA"
lenovo_lxca_event_sourceLetters, Digits, and Underscores and \w+Pre and post context(regexes)are "src=" and " " and Additional context is "LXCA"
lenovo_lxca_mgmt_server_addressIP Address(v4) and \d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}Pre and post context(regexes)are "appladdr=" and " " and Additional context is "LXCA"
lenovo_lxca_serial_numberLetters, Digits, and Underscores and\w+Pre and post context(regexes)are "sn=" and " " and Additional context is "LXCA"
lenovo_lxca_serviceableLetters, Digits, and Underscores and\w+Pre and post context(regexes)are "service=" and " " and Additional context is "LXCA"
lenovo_lxca_severityLetters, Digits, and Underscores and\w+Pre and post context(regexes)are "severity=" and " " and Additional context is "LXCA"
lenovo_lxca_syslog_applicationLetters, Digits, and Underscores and\w+Pre and post context(regexes)are "appl=" and " " and Additional context is "LXCA"
lenovo_lxca_target_ipv6_addressIP Address(v6) and [A-Fa-f0-9]{0,4}:([A-Fa-f0-9]{0,4}:){1,6}[A-Fa-f0-9]{1,4}Pre and post context(regexes)are "address " and " " and Additional context is "LXCA"
lenovo_lxca_timeCustom Regex... and [0-9]{2}:[0-9]{2}:[0-9]{2}Pre and post context(regexes)are " " and " " and Additional context is "LXCA"
lenovo_lxca_user_idLetters, Digits, and Underscores and\w+Pre and post context(regexes)are " user" and " " and Additional context is "LXCA"
lenovo_lxca_uuidHexadecimal and [A-Fa-f0-9]+Pre and post context(regexes)are " uuid" and " " and Additional context is "LXCA"
lenovo_lxca_weekdayLetters, Digits, and Underscores and\w+Pre and post context(regexes)are "(<86>|<83>|<84>) " and " " and Additional context is "LXCA"

The following table lists the various LXCA fields that are used in the vRLI:

Field nameRegexNotes
lenovo_lxco_common_event_idLetters, Digits, and Underscores and\w+Pre and post context(regexes)are 'commonEventID': ' and ', and Additional context is LXCO
lenovo_lxco_event_idLetters, Digits, and Underscores and\w+Pre and post context(regexes) are 'eventID': ' and ', and Additional context is LXCO
lenovo_lxco_component_idHexadecimal and [A-Fa-f0-9]+Pre and post context(regexes) are 'componentID': ' and ', and Additional context is LXCO
lenovo_lxco_event_dateAny character except Whitespace and \S+Pre and post context(regexes) are 'eventDate': ' and ', and Additional context is LXCO
lenovo_lxco_ip_addressIP address(v4) and \d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}Pre and post context(regexes) are 'ipAddress': ' and ', and Additional context is LXCO
lenovo_lxco_messageCustom regex... and [A-Za-z0-9 .]+Pre context(regexes) is 'msg': ' and Additional context is LXCO
lenovo_lxco_severityLetters, Digits, and Underscores and\w+Pre and post context(regexes) are 'severity': ' and ', and Additional context is LXCO
lenovo_lxco_resource_nameCustom regex... and .[A-Za-z0-9 .]+Pre context(regexes) is 'resourceName': ' and Additional context is LXCO
lenovo_lxco_user_actionCustom regex... and [A-Za-z0-9 ./;]+Pre context(regexes) is 'userAction': ' and Additional context is LXCO
lenovo_lxco_sequence_numberLetters, Digits, and Underscores and\w+Pre and post context(regexes) are 'sequenceNumber': ' and ', and Additional context is LXCO
lenovo_lxco_source_typeLetters, Digits, and Underscores and\w+Pre and post context(regexes) are 'sourceType': ' and ', and Additional context is LXCO