-
Notifications
You must be signed in to change notification settings - Fork 30
/
invalid_decoder_syntax.yaml
112 lines (112 loc) · 5.12 KB
/
invalid_decoder_syntax.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
---
-
name: "Invalid decoder syntax: garbage file"
decoder: "custom_decoder_0.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: >-
(1226): Error reading XML file 'etc/decoders/custom_decoder_0.xml': XMLERR: Attribute 'is' has no value. (line 2).
output_data_codemsg: -1
-
name: "Invalid decoder syntax: no closing XML tag"
decoder: "custom_decoder_1.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output: >-
ata_msg: "(1226): Error reading XML file 'etc/decoders/custom_decoder_1.xml': XMLERR: End of file and some elements
were not closed. (line 3).
output_data_codemsg: -1
-
name: "Invalid decoder syntax: no existing parent"
decoder: "custom_decoder_2.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(2101): Parent decoder name invalid: 'test-parent'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: no existing attribute"
decoder: "custom_decoder_3.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "Invalid element 'invalid_field' for decoder 'decoder'"
output_data_codemsg: -1
-
name: "Invalid decoder syntax: decoder with no name"
decoder: "custom_decoder_4.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(1230): Invalid element in the configuration: 'decoder'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: regex attribute without order attribute"
decoder: "custom_decoder_5.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(2107): Decoder configuration error: 'test'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: regex attribute without prematch/program_name/parent attribute"
decoder: "custom_decoder_6.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(2108): No 'prematch' found in decoder: 'test'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: order attribute without regex attribute"
decoder: "custom_decoder_7.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(2107): Decoder configuration error: 'test'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: two-level order parenting"
decoder: "custom_decoder_8.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(2101): Parent decoder name invalid: 'name1'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: invalid plugin_decoder"
decoder: "custom_decoder_9.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(2110): Invalid decoder argument for plugin_decoder: 'INVALID_Decoder'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: invalid offset"
decoder: "custom_decoder_10.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "(2107): Decoder configuration error: 'name'."
output_data_codemsg: -1
-
name: "Invalid decoder syntax: invalid offset"
decoder: "custom_decoder_11.xml"
input: >-
{"version":1,"origin":{"name":"Integration Test","module":"api"},"command":"log_processing","parameters":{"event":
"dummy log","log_format": "syslog","location": "master->/var/log/syslog"}}
output_error: 0
output_data_msg: "ERROR: (2120): Invalid offset value: 'sudo-fields'"
output_data_codemsg: -1