initial
initial
almost ready to try
not yet working
problems remain structuring the json, switching to jiralicious shortly
Basically works
jiralicious
attributions
updated sample
Closed https://github.com/jstewart/jiralicious/issues/17
Adding extractnumbers filter
Add @ to URIPATH and URIPARAM

URIPATH and URIPARAM don't match URIs like "/assets/img/icon_image_detail@2x.png".
Add simple CIDR filter.
Added a bunch of Grok patterns for Cisco ASA firewall syslog messages.
* Confirmed to work:
  ASA-6-106015
  ASA-1-106021
  ASA-4-106023
  ASA-5-106100
  ASA-6-110002
  ASA-6-302010
  ASA-6-302013
  ASA-6-302014
  ASA-6-302015
  ASA-6-302016
  ASA-6-302020
  ASA-6-302021
  ASA-3-313001
  ASA-3-313004
  ASA-4-313005
  ASA-3-313008
  ASA-4-402117
  ASA-4-402119
  ASA-4-419002
  ASA-6-602303
  ASA-6-602304
  ASA-6-713172
  ASA-4-733100
* Based on patterns found here(https://gist.github.com/dav3860/5345656) and documentation here(http://www.cisco.com/en/US/docs/security/asa/syslog-guide/logmsgs.html#wp4771036)
  ASA-2-106001
  ASA-2-106006
  ASA-2-106007
  ASA-2-106010
  ASA-3-106014
  ASA-4-419001
  ASA-4-500004
  ASA-6-305011
  ASA-7-710001
  ASA-7-710002
  ASA-7-710003
  ASA-7-710005
  ASA-7-710006
List all matched message codes in the Grok names to help troublshoot parse failures
Add a Grok expression for the base part of the Cisco ASA syslog message
Use wget-or-curl in Makefile to fetch vendor/geoip data file
Remove stray comma.

It was creating an event with the file field looking like this:

    "file" => [
        [0] "?:?",
        [1] "?"
    ]

Now it looks like:

    "file" => "?:?"
Fix log4j logging when redirecting output to a file (LOGSTASH-1274)
- stop hacking support for in/regexp stuff; this fixes negating regexps
and other things.