pC_airlockallowlistingstrappactivitysuccessserveractivity.md

Parser Content

{
Name = airlock-allowlisting-str-app-activity-success-serveractivity
  ParserVersion = v1.0.0
  Vendor = Airlock
  Product = Airlock Allowlisting
  TimeFormat = "dd/MM/yyyy HH:mm:ss a"
  Conditions = [ """ airlock """, """Airlock[""", """]: ServerActivityMessage|""" ]
  Fields = [
    """ServerActivityMessage\|({time}\d\d\/\d\d\/\d\d\d\d\s\d\d:\d\d:\d\d\s\w{2})\|""",
    """ServerActivityMessage\|[^\|]*\|({operation}[^\|]+)\|""",
    """ServerActivityMessage\|([^\|]*\|){2}(SYSTEM|({user}[^\|]+))\|""",
    """ServerActivityMessage\|([^\|]*\|){3}({additional_info}[^\|$]+?)\s*$""",
    """({event_name}ServerActivityMessage)""",
    """({app}Airlock)"""
  ]


}