uploader.json

{
    "commands": [
        {
            "command": "/sbin/auditctl -s",
            "pattern": [],
            "symbolic_name": "auditctl_status"
        },
        {
            "command": "/usr/sbin/dmidecode -s system-uuid",
            "pattern": [],
            "symbolic_name": "bios_uuid"
        },
        {
            "command": "/sbin/blkid -c /dev/null",
            "pattern": [],
            "symbolic_name": "blkid"
        },
        {
            "command": "/usr/sbin/brctl show",
            "pattern": [],
            "symbolic_name": "brctl_show"
        },
        {
            "command": "/usr/bin/ceph health detail -f json-pretty",
            "pattern": [],
            "symbolic_name": "ceph_health_detail"
        },
        {
            "command": "/usr/bin/ceph osd dump -f json-pretty",
            "pattern": [],
            "symbolic_name": "ceph_osd_dump"
        },
        {
            "command": "/usr/bin/ceph osd tree -f json-pretty",
            "pattern": [],
            "symbolic_name": "ceph_osd_tree"
        },
        {
            "command": "/usr/bin/ceph -s -f json-pretty",
            "pattern": [],
            "symbolic_name": "ceph_s"
        },
        {
            "command": "/usr/bin/ceph -v",
            "pattern": [],
            "symbolic_name": "ceph_v"
        },
        {
            "command": "/usr/bin/find /etc/origin/node /etc/origin/master /etc/pki -type f -exec /usr/bin/openssl x509 -noout -enddate -in '{}' \\; -exec echo 'FileName= {}' \\;",
            "pattern": [],
            "symbolic_name": "certificates_enddate"
        },
        {
            "command": "/sbin/chkconfig --list",
            "pattern": [],
            "symbolic_name": "chkconfig"
        },
        {
            "command": "/usr/bin/chronyc sources",
            "pattern": [],
            "symbolic_name": "chronyc_sources"
        },
        {
            "command": "/bin/date",
            "pattern": [],
            "symbolic_name": "date"
        },
        {
            "command": "/bin/date --utc",
            "pattern": [],
            "symbolic_name": "date_utc"
        },
        {
            "command": "/sbin/dcbtool gc  dcb",
            "pattern": [],
            "pre_command": "iface",
            "symbolic_name": "dcbtool_gc_dcb"
        },
        {
            "command": "/bin/df -al",
            "pattern": [],
            "symbolic_name": "df__al"
        },
        {
            "command": "/bin/df -alP",
            "pattern": [],
            "symbolic_name": "df__alP"
        },
        {
            "command": "/bin/df -li",
            "pattern": [],
            "symbolic_name": "df__li"
        },
        {
            "command": "/usr/bin/dig +dnssec . SOA",
            "pattern": [],
            "symbolic_name": "dig_dnssec"
        },
        {
            "command": "/usr/bin/dig +edns=0 . SOA",
            "pattern": [],
            "symbolic_name": "dig_edns"
        },
        {
            "command": "/usr/bin/dig +noedns . SOA",
            "pattern": [],
            "symbolic_name": "dig_noedns"
        },
        {
            "command": "/bin/dmesg",
            "pattern": [
                "CIFS VFS: protocol revalidation - security settings mismatch",
                "CSUM",
                "CVE-2017-1000364",
                "Device is ineligible for IOMMU domain attach due to platform RMRR requirement",
                "Dropping TSO",
                "EDAC ",
                "FEATURE IBPB_SUPPORT",
                "FEATURE SPEC_CTRL",
                "Kernel page table isolation",
                "Linux version",
                "NUMA: ",
                "SMBIOS ",
                "WRITE SAME failed. Manually zeroing",
                "blocked FC remote port time out",
                "crashkernel reservation failed",
                "crashkernel=auto resulted in zero bytes of reserved memory",
                "is now offline",
                "ixgbevf: Unknown parameter `InterruptThrottleRate'",
                "mce: ",
                "netconsole: network logging started",
                "vpd r/w failed",
                "x86/pti"
            ],
            "symbolic_name": "dmesg"
        },
        {
            "command": "/usr/sbin/dmidecode",
            "pattern": [],
            "symbolic_name": "dmidecode"
        },
        {
            "command": "/usr/sbin/dmsetup info -C",
            "pattern": [],
            "symbolic_name": "dmsetup_info"
        },
        {
            "command": "/usr/bin/docker info",
            "pattern": [],
            "symbolic_name": "docker_info"
        },
        {
            "command": "/usr/bin/docker ps --all --no-trunc",
            "pattern": [],
            "symbolic_name": "docker_list_containers"
        },
        {
            "command": "/usr/bin/docker images --all --no-trunc --digests",
            "pattern": [],
            "symbolic_name": "docker_list_images"
        },
        {
            "command": "/sbin/ethtool",
            "pattern": [],
            "pre_command": "iface",
            "symbolic_name": "ethtool"
        },
        {
            "command": "/sbin/ethtool -S",
            "pattern": [],
            "pre_command": "iface",
            "symbolic_name": "ethtool_S"
        },
        {
            "command": "/sbin/ethtool -g",
            "pattern": [],
            "pre_command": "iface",
            "symbolic_name": "ethtool_g"
        },
        {
            "command": "/sbin/ethtool -i",
            "pattern": [],
            "pre_command": "iface",
            "symbolic_name": "ethtool_i"
        },
        {
            "command": "/sbin/ethtool -k",
            "pattern": [],
            "pre_command": "iface",
            "symbolic_name": "ethtool_k"
        },
        {
            "command": "/usr/bin/facter",
            "pattern": [],
            "symbolic_name": "facter"
        },
        {
            "command": "/usr/bin/qpid-stat -g --ssl-certificate=/etc/pki/katello/qpid_client_striped.crt -b amqps://localhost:5671",
            "pattern": [],
            "symbolic_name": "qpid_stat_g"
        },
        {
            "command": "/bin/fc-match -sv 'sans:regular:roman' family fontformat",
            "pattern": [],
            "symbolic_name": "fc_match"
        },
        {
            "command": "/usr/bin/getcert list",
            "pattern": [],
            "symbolic_name": "getcert_list"
        },
        {
            "command": "/usr/sbin/getenforce",
            "pattern": [],
            "symbolic_name": "getenforce"
        },
        {
            "command": "/usr/sbin/getsebool -a",
            "pattern": [],
            "symbolic_name": "getsebool"
        },
        {
            "command": "/usr/sbin/gluster volume info",
            "pattern": [],
            "symbolic_name": "gluster_v_info"
        },
        {
            "command": "/usr/sbin/gluster volume status",
            "pattern": [],
            "symbolic_name": "gluster_v_status"
        },
        {
            "command": "/bin/ls -l /boot/grub/grub.conf",
            "pattern": [],
            "symbolic_name": "grub1_config_perms"
        },
        {
            "command": "/bin/ls -l /boot/grub2/grub.cfg",
            "pattern": [],
            "symbolic_name": "grub_config_perms"
        },
        {
            "command": "/usr/sbin/grubby --default-index",
            "pattern": [],
            "symbolic_name": "grubby_default_index"
        },
        {
            "command": "/usr/sbin/grubby --default-kernel",
            "pattern": [],
            "symbolic_name": "grubby_default_kernel"
        },
        {
            "command": "/usr/bin/crontab -l -u heat",
            "pattern": [
                "heat-manage"
            ],
            "symbolic_name": "heat_crontab"
        },
        {
            "command": "/bin/hostname -f",
            "pattern": [],
            "symbolic_name": "hostname"
        },
        {
            "command": "/bin/hostname -I",
            "pattern": [],
            "symbolic_name": "ip_addresses"
        },
        {
            "command": "/usr/sbin/httpd -V",
            "pattern": [],
            "symbolic_name": "httpd_V"
        },
        {
            "command": "/usr/sbin/httpd.event -V",
            "pattern": [],
            "symbolic_name": "httpd_event_V"
        },
        {
            "command": "/usr/sbin/httpd.worker -V",
            "pattern": [],
            "symbolic_name": "httpd_worker_V"
        },
        {
            "command": "/usr/sbin/httpd -M",
            "pattern": [],
            "symbolic_name": "httpd_M"
        },
        {
            "command": "/bin/rpm -qa --qf='\\{\"name\":\"%{NAME}\",\"epoch\":\"%{EPOCH}\",\"version\":\"%{VERSION}\",\"release\":\"%{RELEASE}\",\"arch\":\"%{ARCH}\",\"installtime\":\"%{INSTALLTIME:date}\",\"buildtime\":\"%{BUILDTIME}\",\"vendor\":\"%{VENDOR}\",\"buildhost\":\"%{BUILDHOST}\",\"sigpgp\":\"%{SIGPGP:pgpsig}\"\\}\n'",
            "pattern": [],
            "symbolic_name": "installed_rpms",
            "image": true
        },
        {
            "command": "/sbin/ip -s link",
            "pattern": [],
            "symbolic_name": "ip_s_link"
        },
        {
            "command": "/sbin/ip6tables-save",
            "pattern": [],
            "symbolic_name": "ip6tables"
        },
        {
            "command": "/sbin/ip addr",
            "pattern": [],
            "symbolic_name": "ip_addr"
        },
        {
            "command": "/sbin/ip route show table all",
            "pattern": [],
            "symbolic_name": "ip_route_show_table_all"
        },
        {
            "command": "/usr/bin/ipcs -m",
            "pattern": [],
            "symbolic_name": "ipcs_m"
        },
        {
            "command": "/usr/bin/ipcs -m -p",
            "pattern": [],
            "symbolic_name": "ipcs_m_p"
        },
        {
            "command": "/usr/bin/ipcs -s",
            "pattern": [],
            "symbolic_name": "ipcs_s"
        },
        {
            "command": "/sbin/iptables-save",
            "pattern": [],
            "symbolic_name": "iptables"
        },
        {
            "command": "/sbin/ip -4 neighbor show nud all",
            "pattern": [],
            "symbolic_name": "ipv4_neigh"
        },
        {
            "command": "/sbin/ip -6 neighbor show nud all",
            "pattern": [],
            "symbolic_name": "ipv6_neigh"
        },
        {
            "command": "/usr/sbin/iscsiadm -m session",
            "pattern": [],
            "symbolic_name": "iscsiadm_m_session"
        },
        {
            "command": "/usr/bin/crontab -l -u keystone",
            "pattern": [
                "heat-manage",
                "keystone-manage"
            ],
            "symbolic_name": "keystone_crontab"
        },
        {
            "command": "/usr/bin/find -L /lib /lib64 -name 'libkeyutils.so*'",
            "pattern": [],
            "symbolic_name": "libkeyutils"
        },
        {
            "command": "/usr/bin/find -L /lib /lib64 -name libkeyutils.so.1 -exec objdump -x \"{}\" \\;",
            "pattern": [],
            "symbolic_name": "libkeyutils_objdumps"
        },
        {
            "command": "/usr/bin/file -L /etc/localtime",
            "pattern": [],
            "symbolic_name": "localtime"
        },
        {
            "command": "/usr/bin/lpstat -p",
            "pattern": [],
            "symbolic_name": "lpstat_p"
        },
        {
            "command": "/bin/ls -lanR /boot",
            "pattern": [],
            "symbolic_name": "ls_boot"
        },
        {
            "command": "/bin/ls -lanR /dev",
            "pattern": [],
            "symbolic_name": "ls_dev"
        },
        {
            "command": "/bin/ls -lanR /dev/disk",
            "pattern": [],
            "symbolic_name": "ls_disk"
        },
        {
            "command": "/bin/ls -lanR /var/lib/docker/volumes",
            "pattern": [],
            "symbolic_name": "ls_docker_volumes"
        },
        {
            "command": "/bin/ls -lanR /etc",
            "pattern": [],
            "symbolic_name": "ls_etc"
        },
        {
            "command": "/bin/ls -lanR /lib/firmware",
            "pattern": [],
            "symbolic_name": "ls_lib_firmware"
        },
        {
            "command": "/bin/ls -lanR /sys/firmware",
            "pattern": [],
            "symbolic_name": "ls_sys_firmware"
        },
        {
            "command": "/bin/ls -la /var/lib/mongodb",
            "pattern": [],
            "symbolic_name": "ls_var_lib_mongodb"
        },
        {
            "command": "/bin/ls -laR /var/lib/nova/instances",
            "pattern": [],
            "symbolic_name": "ls_R_var_lib_nova_instances"
        },
        {
            "command": "/bin/ls -laRZ /var/lib/nova/instances",
            "pattern": [],
            "symbolic_name": "ls_var_lib_nova_instances"
        },
        {
            "command": "/bin/ls -ln /usr/sbin",
            "pattern": [
                "total"
            ],
            "symbolic_name": "ls_usr_sbin"
        },
        {
            "command": "/bin/ls -la /var/log /var/log/audit",
            "pattern": [],
            "symbolic_name": "ls_var_log"
        },
        {
            "command": "/bin/ls -la /dev/null /var/www",
            "pattern": [],
            "symbolic_name": "ls_var_www"
        },
        {
            "command": "/bin/ls -lnL /var/run",
            "pattern": [],
            "symbolic_name": "ls_var_run"
        },
        {
            "command": "/bin/ls -ln /var/spool/postfix/maildrop",
            "pattern": [],
            "symbolic_name": "ls_var_spool_postfix_maildrop"
        },
        {
            "command": "/bin/ls -ln /var/spool/clientmqueue",
            "pattern": [],
            "symbolic_name": "ls_var_spool_clientmq"
        },
        {
            "command": "/bin/ls -l /var/lib/cni/networks/openshift-sdn",
            "pattern": [],
            "symbolic_name": "ls_ocp_cni_openshift_sdn"
        },
        {
            "command": "/bin/ls -lan /",
            "pattern": [],
            "symbolic_name": "ls_osroot"
        },
        {
            "command": "/bin/ls -ln /var/tmp",
            "pattern": [
                "/var/tmp",
                "foreman-ssh-cmd"
            ],
            "symbolic_name": "ls_var_tmp"
        },
        {
            "command": "/bin/lsblk",
            "pattern": [],
            "symbolic_name": "lsblk"
        },
        {
            "command": "/bin/lsblk -P -o NAME,KNAME,MAJ:MIN,FSTYPE,MOUNTPOINT,LABEL,UUID,RA,RO,RM,MODEL,SIZE,STATE,OWNER,GROUP,MODE,ALIGNMENT,MIN-IO,OPT-IO,PHY-SEC,LOG-SEC,ROTA,SCHED,RQ-SIZE,TYPE,DISC-ALN,DISC-GRAN,DISC-MAX,DISC-ZERO",
            "pattern": [],
            "symbolic_name": "lsblk_pairs"
        },
        {
            "command": "/sbin/lsmod",
            "pattern": [],
            "symbolic_name": "lsmod"
        },
        {
            "command": "/usr/sbin/lsof",
            "pattern": [
                "(deleted)",
                "/var/log/journal",
                "COMMAND",
                "libcrypto",
                "libssl",
                "libssl.so",
                "lsnrctl",
                "ovs-vswit",
                "rgw_swift",
                "tnslsnr"
            ],
            "symbolic_name": "lsof"
        },
        {
            "command": "/sbin/lspci -k",
            "pattern": [],
            "symbolic_name": "lspci"
        },
        {
            "command": "/sbin/lspci -k",
            "pattern": [],
            "symbolic_name": "lspci_kernel"
        },
        {
            "command": "/usr/sap/hostctrl/exe/lssap",
            "pattern": [],
            "symbolic_name": "lssap"
        },
        {
            "command": "/usr/sap/hostctrl/exe/saphostctrl -function GetCIMObject -enuminstances SAPInstance",
            "pattern": [
                "******",
                "CreationClassName",
                "Hostname",
                "InstanceName",
                "SID",
                "SapVersionInfo",
                "SystemNumber"
            ],
            "symbolic_name": "saphostctl_getcimobject_sapinstance"
        },
        {
            "command": "/usr/sap/hostctrl/exe/saphostexec -status",
            "pattern": [],
            "symbolic_name": "saphostexec_status"
        },
        {
            "command": "/usr/sap/hostctrl/exe/saphostexec -version",
            "pattern": [],
            "symbolic_name": "saphostexec_version"
        },
        {
            "command": "/usr/bin/lsscsi",
            "pattern": [],
            "symbolic_name": "lsscsi"
        },
        {
            "command": "/sbin/lvs --nameprefixes --noheadings --separator='|' -a -o lv_name,lv_size,lv_attr,mirror_log,vg_name,devices,region_size,data_percent,metadata_percent,segtype,seg_monitor --config=\"global{locking_type=0}\"",
            "pattern": [],
            "symbolic_name": "lvs_noheadings"
        },
        {
            "command": "/bin/awk -F':' '{ if($3 > max) max = $3 } END { print max }' /etc/passwd",
            "pattern": [],
            "symbolic_name": "max_uid"
        },
        {
            "command": "/usr/bin/md5sum /dev/null /etc/pki/{product,product-default}/69.pem",
            "pattern": [],
            "symbolic_name": "md5chk_files"
        },
        {
            "command": "/usr/bin/find /sys/bus/pci/devices/*/mlx4_port[0-9] -print -exec cat {} \\;",
            "pattern": [],
            "symbolic_name": "mlx4_port"
        },
        {
            "command": "/bin/mount",
            "pattern": [],
            "symbolic_name": "mount"
        },
        {
            "command": "/usr/bin/find /sys/devices/virtual/net/ -name multicast_querier -print -exec cat {} \\;",
            "pattern": [],
            "symbolic_name": "multicast_querier"
        },
        {
            "command": "/sbin/multipath -v4 -ll",
            "pattern": [],
            "symbolic_name": "multipath__v4__ll"
        },
        {
            "command": "/bin/lsinitrd -f /etc/multipath.conf",
            "pattern": [],
            "symbolic_name": "multipath_conf_initramfs"
        },
        {
            "command": "/bin/mysqladmin variables",
            "pattern": [],
            "symbolic_name": "mysqladmin_vars"
        },
        {
            "command": "/usr/sbin/named-checkconf -p",
            "pattern": [
                "DNSSEC-ENABLE",
                "Dnssec-Enable",
                "dnssec-enable"
            ],
            "symbolic_name": "named_checkconf_p"
        },
        {
            "command": "/bin/ls /var/run/netns",
            "pattern": [],
            "symbolic_name": "namespace"
        },
        {
            "command": "/bin/netstat -neopa",
            "pattern": [],
            "symbolic_name": "netstat"
        },
        {
            "command": "/bin/netstat -i",
            "pattern": [],
            "symbolic_name": "netstat_i"
        },
        {
            "command": "/bin/netstat -s",
            "pattern": [],
            "symbolic_name": "netstat_s"
        },
        {
            "command": "/bin/netstat -agn",
            "pattern": [],
            "symbolic_name": "netstat__agn"
        },
        {
            "command": "/usr/bin/nmcli conn show",
            "pattern": [],
            "symbolic_name": "nmcli_conn_show"
        },
        {
            "command": "/usr/bin/crontab -l -u nova",
            "pattern": [],
            "symbolic_name": "nova_crontab"
        },
        {
            "command": "/usr/bin/id -u nova",
            "pattern": [],
            "symbolic_name": "nova_uid"
        },
        {
            "command": "/usr/bin/id -u nova_migration",
            "pattern": [],
            "symbolic_name": "nova_migration_uid"
        },
        {
            "command": "/usr/sbin/ntpq -c 'rv 0 leap'",
            "pattern": [],
            "symbolic_name": "ntpq_leap"
        },
        {
            "command": "/usr/sbin/ntpq -pn",
            "pattern": [],
            "symbolic_name": "ntpq_pn"
        },
        {
            "command": "/usr/sbin/ntptime",
            "pattern": [],
            "symbolic_name": "ntptime"
        },
        {
            "command": "/bin/grep -c '^[[:digit:]]' /etc/passwd /etc/group",
            "pattern": [],
            "symbolic_name": "numeric_user_group_name"
        },
        {
            "command": "/usr/bin/ovs-vsctl -t 5 get Open_vSwitch . other_config",
            "pattern": [],
            "symbolic_name": "openvswitch_other_config"
        },
        {
            "command": "/usr/bin/ovs-vsctl show",
            "pattern": [],
            "symbolic_name": "ovs_vsctl_show"
        },
        {
            "command": "/usr/bin/passenger-status",
            "pattern": [],
            "symbolic_name": "passenger_status"
        },
        {
            "command": "/usr/sbin/pcs status",
            "pattern": [],
            "symbolic_name": "pcs_status"
        },
        {
            "command": "/bin/ps aux",
            "pattern": [
                "/usr/bin/docker",
                "/usr/bin/docker daemon",
                "/usr/bin/docker-current",
                "/usr/bin/docker-current daemon",
                "/usr/bin/dockerd-current",
                "/usr/bin/openshift start master",
                "/usr/bin/openshift start node",
                "COMMAND",
                "STAP/8.2",
                "ceph-osd",
                "chronyd",
                "mysqld",
                "ntpd",
                "openshift start master api",
                "openshift start master controllers",
                "openshift start node",
                "phc2sys",
                "postgres",
                "ptp4l",
                "tomcat"
            ],
            "symbolic_name": "ps_aux"
        },
        {
            "command": "/bin/ps auxcww",
            "pattern": [],
            "symbolic_name": "ps_auxcww"
        },
        {
            "command": "/bin/ps auxww",
            "pattern": [
                "/sbin/multipathd",
                "/usr/bin/celery worker",
                "/usr/sbin/fcoemon --syslog",
                "COMMAND",
                "catalina.base",
                "ceilometer-coll",
                "chronyd",
                "cmirrord",
                "greenplum",
                "httpd",
                "iscsid",
                "java",
                "jboss",
                "nfs-server",
                "nfsd",
                "nginx",
                "ntpd",
                "postgres",
                "smbd",
                "target_completi",
                "taskomaticd",
                "tgtd",
                "virt-who"
            ],
            "symbolic_name": "ps_auxww"
        },
        {
            "command": "/bin/ps -ef",
            "pattern": [
                "CMD",
                "nginx: master process",
                "nginx: worker process"
            ],
            "symbolic_name": "ps_ef"
        },
        {
            "command": "/bin/ps -eo pid,ppid,comm",
            "pattern": [],
            "symbolic_name": "ps_eo"
        },
        {
            "command": "/sbin/pvs --nameprefixes --noheadings --separator='|' -a -o pv_all,vg_name --config=\"global{locking_type=0}\"",
            "pattern": [],
            "symbolic_name": "pvs_noheadings"
        },
        {
            "command": "/usr/sbin/rabbitmqctl list_queues name messages consumers auto_delete",
            "pattern": [],
            "symbolic_name": "rabbitmq_queues"
        },
        {
            "command": "/usr/sbin/rabbitmqctl report",
            "pattern": [],
            "symbolic_name": "rabbitmq_report"
        },
        {
            "command": "/usr/sbin/rabbitmqctl list_users",
            "pattern": [],
            "symbolic_name": "rabbitmq_users"
        },
        {
            "command": "/usr/bin/rhn-schema-version",
            "pattern": [],
            "symbolic_name": "rhn_schema_version"
        },
        {
            "command": "/usr/bin/crontab -l -u root",
            "pattern": [
                "heat-manage"
            ],
            "symbolic_name": "root_crontab"
        },
        {
            "command": "/bin/rpm -V coreutils procps procps-ng shadow-utils passwd sudo",
            "pattern": [],
            "symbolic_name": "rpm__V_packages"
        },
        {
            "command": "/usr/sbin/sestatus -b",
            "pattern": [],
            "symbolic_name": "sestatus"
        },
        {
            "command": "/usr/bin/smbstatus -p",
            "pattern": [],
            "symbolic_name": "smbstatus_p"
        },
        {
            "command": "/usr/bin/scl --list",
            "pattern": [],
            "symbolic_name": "software_collections_list"
        },
        {
            "command": "/usr/bin/subscription-manager identity",
            "pattern": [],
            "symbolic_name": "subscription_manager_id"
        },
        {
            "command": "/usr/bin/subscription-manager release --show",
            "pattern": [],
            "symbolic_name": "subscription_manager_release_show"
        },
        {
            "command": "/usr/bin/subscription-manager repos --list-enabled",
            "pattern": [],
            "symbolic_name": "subscription_manager_repos_list_enabled"
        },
        {
            "command": "/usr/sbin/ss -tupna",
            "pattern": [],
            "symbolic_name": "ss"
        },
        {
            "command": "/usr/sbin/ss -tupna",
            "pattern": [],
            "symbolic_name": "ss_tupna"
        },
        {
            "command": "/bin/ls -l /etc/ssh/sshd_config",
            "pattern": [],
            "symbolic_name": "sshd_config_perms"
        },
        {
            "command": "/sbin/sysctl -a",
            "pattern": [],
            "symbolic_name": "sysctl"
        },
        {
            "command": "/bin/systemctl show openstack-cinder-volume",
            "pattern": [],
            "symbolic_name": "systemctl_cinder_volume"
        },
        {
            "command": "/bin/systemctl list-unit-files",
            "pattern": [],
            "symbolic_name": "systemctl_list_unit_files"
        },
        {
            "command": "/bin/systemctl list-units",
            "pattern": [],
            "symbolic_name": "systemctl_list_units"
        },
        {
            "command": "/bin/systemctl show mariadb",
            "pattern": [],
            "symbolic_name": "systemctl_mariadb"
        },
        {
            "command": "/bin/systemctl show qpidd",
            "pattern": [],
            "symbolic_name": "systemctl_qpidd"
        },
        {
            "command": "/bin/systemctl show qdrouterd",
            "pattern": [],
            "symbolic_name": "systemctl_qdrouterd"
        },
        {
            "command": "/bin/systemctl show httpd",
            "pattern": [],
            "symbolic_name": "systemctl_httpd"
        },
        {
            "command": "/bin/systemctl show smart_proxy_dynflow_core",
            "pattern": [],
            "symbolic_name": "systemctl_smartpdc"
        },
        {
            "command": "/bin/systool -b scsi -v",
            "pattern": [],
            "symbolic_name": "systool_b_scsi_v"
        },
        {
            "command": "/usr/bin/teamdctl  state dump",
            "pattern": [],
            "pre_command": "iface",
            "symbolic_name": "teamdctl_state_dump"
        },
        {
            "command": "/usr/bin/find /usr/share -maxdepth 1 -name 'tomcat*' -exec /bin/grep -R -s 'VirtualDirContext' --include '*.xml' '{}' +",
            "pattern": [],
            "symbolic_name": "tomcat_vdc_fallback"
        },
        {
            "command": "/usr/sbin/tuned-adm list",
            "pattern": [],
            "symbolic_name": "tuned_adm"
        },
        {
            "command": "/bin/uname -a",
            "pattern": [],
            "symbolic_name": "uname"
        },
        {
            "command": "/usr/bin/uptime",
            "pattern": [],
            "symbolic_name": "uptime"
        },
        {
            "command": "/sbin/vgdisplay -vv",
            "pattern": [],
            "symbolic_name": "vgdisplay"
        },
        {
            "command": "/sbin/vgs --nameprefixes --noheadings --separator='|' -a -o vg_all --config=\"global{locking_type=0}\"",
            "pattern": [],
            "symbolic_name": "vgs_noheadings"
        },
        {
            "command": "/usr/bin/virsh --readonly list --all",
            "pattern": [],
            "symbolic_name": "virsh_list_all"
        },
        {
            "command": "/usr/sbin/virt-what",
            "pattern": [],
            "symbolic_name": "virt_what"
        },
        {
            "command": "/usr/bin/find /var/crash /var/tmp -path '*.reports-*/whoopsie-report' -print -quit",
            "pattern": [],
            "symbolic_name": "woopsie"
        },
        {
            "command": "/usr/bin/yum -C repolist",
            "pattern": [],
            "symbolic_name": "yum_repolist"
        }
    ],
    "files": [
        {
            "file": "/root/.config/openshift/hosts",
            "pattern": [
                "[",
                "openshift_use_crio"
            ],
            "symbolic_name": "openshift_hosts"
        },
        {
            "file": "/etc/redhat-access-insights/machine-id",
            "pattern": [],
            "symbolic_name": "machine_id1"
        },
        {
            "file": "/etc/redhat_access_proactive/machine-id",
            "pattern": [],
            "symbolic_name": "machine_id2"
        },
        {
            "file": "/etc/machine-id",
            "pattern": [],
            "symbolic_name": "etc_machine_id"
        },
        {
            "file": "/proc/1/cgroup",
            "pattern": [],
            "symbolic_name": "init_process_cgroup"
        },
        {
            "file": "/etc/insights-client/machine-id",
            "pattern": [],
            "symbolic_name": "machine_id3"
        },
        {
            "file": "/var/log/audit/audit.log",
            "pattern": [
                "comm=\"logrotate\" path=\"/var/log/candlepin",
                "comm=\"mongod\"",
                "comm=\"virtlogd\" name=\"console.log\"",
                "type=AVC"
            ],
            "symbolic_name": "audit_log"
        },
        {
            "file": "/etc/audit/auditd.conf",
            "pattern": [],
            "symbolic_name": "auditd_conf"
        },
        {
            "file": "/sys/fs/selinux/avc/hash_stats",
            "pattern": [],
            "symbolic_name": "avc_hash_stats"
        },
        {
            "file": "/sys/fs/selinux/avc/cache_threshold",
            "pattern": [],
            "symbolic_name": "avc_cache_threshold"
        },
        {
            "file": "/proc/net/bonding/()*bond.*",
            "pattern": [],
            "symbolic_name": "bond"
        },
        {
            "file": "/var/log/tomcat/()*catalina\\.out",
            "pattern": [
                "APPARENT DEADLOCK!",
                "NoCobblerTokenException: We had an error trying to login."
            ],
            "symbolic_name": "catalina_out"
        },
        {
            "file": "/var/log/tomcat6/()*catalina\\.out",
            "pattern": [
                "APPARENT DEADLOCK!",
                "NoCobblerTokenException: We had an error trying to login."
            ],
            "symbolic_name": "catalina_out"
        },
        {
            "file": "/tomcat-logs/tomcat/()*catalina\\.out",
            "pattern": [
                "APPARENT DEADLOCK!",
                "NoCobblerTokenException: We had an error trying to login."
            ],
            "symbolic_name": "catalina_out"
        },
        {
            "file": "/tomcat-logs/tomcat6/()*catalina\\.out",
            "pattern": [
                "APPARENT DEADLOCK!",
                "NoCobblerTokenException: We had an error trying to login."
            ],
            "symbolic_name": "catalina_out"
        },
        {
            "file": "/proc/driver/cciss/()*cciss.*",
            "pattern": [],
            "symbolic_name": "cciss"
        },
        {
            "file": "/etc/ceilometer/ceilometer.conf",
            "pattern": [],
            "symbolic_name": "ceilometer_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/ceilometer/etc/ceilometer/ceilometer.conf",
            "pattern": [],
            "symbolic_name": "ceilometer_conf"
        },
        {
            "file": "/etc/ceph/ceph.conf",
            "pattern": [
                "[",
                "rgw_swift_account_in_url"
            ],
            "symbolic_name": "ceph_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/ceph/etc/ceph/ceph.conf",
            "pattern": [
                "[",
                "rgw_swift_account_in_url"
            ],
            "symbolic_name": "ceph_conf"
        },
        {
            "file": "/var/log/ceph/ceph.log",
            "pattern": [
                "[WRN] slow request"
            ],
            "symbolic_name": "ceph_log"
        },
        {
            "file": "/var/log/ceph/()*ceph-osd.*\\.log$",
            "pattern": [
                "common/Thread.cc"
            ],
            "symbolic_name": "ceph_osd_log"
        },
        {
            "file": "/etc/chrony.conf",
            "pattern": [],
            "symbolic_name": "chrony_conf"
        },
        {
            "file": "/var/lib/pacemaker/cib/cib.xml",
            "pattern": [],
            "symbolic_name": "cib_xml"
        },
        {
            "file": "/etc/cinder/cinder.conf",
            "pattern": [],
            "symbolic_name": "cinder_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/cinder/etc/cinder/cinder.conf",
            "pattern": [],
            "symbolic_name": "cinder_conf"
        },
        {
            "file": "/var/log/cinder/volume.log",
            "pattern": [
                "Image cloning unsuccessful for image",
                "Message: NFS file could not be discovered.",
                "[Errno 24] Too many open files"
            ],
            "symbolic_name": "cinder_volume_log"
        },
        {
            "file": "/etc/cluster/cluster.conf",
            "pattern": [
                "clusternode name="
            ],
            "symbolic_name": "cluster_conf"
        },
        {
            "file": "/proc/cmdline",
            "pattern": [],
            "symbolic_name": "cmdline"
        },
        {
            "file": "/etc/corosync/corosync.conf",
            "pattern": [],
            "symbolic_name": "corosync_conf"
        },
        {
            "file": "/etc/cobbler/modules.conf",
            "pattern": [],
            "symbolic_name": "cobbler_modules_conf"
        },
        {
            "file": "/etc/cobbler/settings",
            "pattern": [],
            "symbolic_name": "cobbler_settings"
        },
        {
            "file": "/etc/sysconfig/corosync",
            "pattern": [],
            "symbolic_name": "corosync"
        },
        {
            "file": "/proc/cpuinfo",
            "pattern": [],
            "symbolic_name": "cpuinfo"
        },
        {
            "file": "/sys/devices/system/clocksource/clocksource0/current_clocksource",
            "pattern": [],
            "symbolic_name": "current_clocksource"
        },
        {
            "file": "/sys/devices/system/cpu/smt/active",
            "pattern": [],
            "symbolic_name": "cpu_smt_active"
        },
        {
            "file": "/sys/devices/system/cpu/smt/control",
            "pattern": [],
            "symbolic_name": "cpu_smt_control"
        },
        {
            "file": "/sys/devices/system/cpu/vulnerabilities/meltdown",
            "pattern": [],
            "symbolic_name": "cpu_vulns_meltdown"
        },
        {
            "file": "/sys/devices/system/cpu/vulnerabilities/spectre_v1",
            "pattern": [],
            "symbolic_name": "cpu_vulns_spectre_v1"
        },
        {
            "file": "/sys/devices/system/cpu/vulnerabilities/spectre_v2",
            "pattern": [],
            "symbolic_name": "cpu_vulns_spectre_v2"
        },
        {
            "file": "/sys/devices/system/cpu/vulnerabilities/spec_store_bypass",
            "pattern": [],
            "symbolic_name": "cpu_vulns_spec_store_bypass"
        },
        {
            "file": "/sys/fs/cgroup/cpuset/cpuset.cpus",
            "pattern": [],
            "symbolic_name": "cpuset_cpus"
        },
        {
            "file": "/sys/kernel/debug/x86/retp_enabled",
            "pattern": [],
            "symbolic_name": "x86_retp_enabled"
        },
        {
            "file": "/var/log/dirsrv/.*/()*(errors|errors\\.2.*)",
            "pattern": [
                "We recommend to increase the entry cache size nsslapd-cachememsize"
            ],
            "symbolic_name": "dirsrv_errors"
        },
        {
            "file": "/etc/redhat-access-insights/machine-id",
            "pattern": [],
            "symbolic_name": "machine_id1"
        },
        {
            "file": "/etc/sysconfig/docker-storage-setup",
            "pattern": [],
            "symbolic_name": "docker_storage_setup"
        },
        {
            "file": "/etc/sysconfig/docker",
            "pattern": [],
            "symbolic_name": "docker_sysconfig"
        },
        {
            "file": "/var/log/ovirt-engine/engine.log",
            "pattern": [
                "org.ovirt.engine.core.bll.storage.lease.AddVmLeaseCommand",
                "org.ovirt.engine.core.bll.storage.lease.RemoveVmLeaseCommand",
                "org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector",
                "org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugLeaseVDSCommand",
                "org.ovirt.engine.core.vdsbroker.vdsbroker.HotUnplugLeaseVDSCommand"
            ],
            "symbolic_name": "engine_log"
        },
        {
            "file": "/var/log/ovirt-engine/server.log",
            "pattern": [
                "ERROR [org.jboss.as.controller.management-operation]",
                "Operation (\"deploy\") failed"
            ],
            "symbolic_name": "ovirt_engine_server_log"
        },
        {
            "file": "/var/log/ovirt-engine/ui.log",
            "pattern": [
                "Uncaught exception: com.google.gwt.event.shared.UmbrellaException"
            ],
            "symbolic_name": "ovirt_engine_ui_log"
        },
        {
            "file": "/var/log/ovirt-engine/boot.log",
            "pattern": [],
            "symbolic_name": "ovirt_engine_boot_log"
        },
        {
            "file": "/var/log/ovirt-engine/console.log",
            "pattern": [],
            "symbolic_name": "ovirt_engine_console_log"
        },
        {
            "file": "/etc/systemd/()*journald\\.conf",
            "pattern": [],
            "symbolic_name": "etc_journald_conf"
        },
        {
            "file": "/etc/systemd/journald.conf.d/()*.+\\.conf",
            "pattern": [],
            "symbolic_name": "etc_journald_conf_d"
        },
        {
            "file": "/etc/fstab",
            "pattern": [],
            "symbolic_name": "fstab"
        },
        {
            "file": "/etc/my.cnf.d/galera.cnf",
            "pattern": [],
            "symbolic_name": "galera_cnf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/mysql/etc/my.cnf.d/galera.cnf",
            "pattern": [],
            "symbolic_name": "galera_cnf"
        },
        {
            "file": "/boot/efi/EFI/redhat/grub.conf",
            "pattern": [],
            "symbolic_name": "grub_efi_conf"
        },
        {
            "file": "/boot/grub/grub.conf",
            "pattern": [],
            "symbolic_name": "grub_conf"
        },
        {
            "file": "/boot/efi/EFI/redhat/grub.cfg",
            "pattern": [],
            "symbolic_name": "grub2_efi_cfg"
        },
        {
            "file": "/boot/grub2/grub.cfg",
            "pattern": [],
            "symbolic_name": "grub2_cfg"
        },
        {
            "file": "/etc/haproxy/haproxy.cfg",
            "pattern": [],
            "symbolic_name": "haproxy_cfg"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/haproxy/etc/haproxy/haproxy.cfg",
            "pattern": [],
            "symbolic_name": "haproxy_cfg"
        },
        {
            "file": "/etc/heat/heat.conf",
            "pattern": [],
            "symbolic_name": "heat_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/heat/etc/heat/heat.conf",
            "pattern": [],
            "symbolic_name": "heat_conf"
        },
        {
            "file": "/etc/hosts",
            "pattern": [],
            "symbolic_name": "hosts"
        },
        {
            "file": "/etc/httpd/conf/()*httpd\\.conf",
            "pattern": [],
            "symbolic_name": "httpd_conf"
        },
        {
            "file": "/etc/httpd/conf.d/()*.+\\.conf",
            "pattern": [],
            "symbolic_name": "httpd_conf_d"
        },
        {
            "file": "/opt/rh/httpd24/root/etc/httpd/conf/httpd.conf",
            "pattern": [],
            "symbolic_name": "httpd_conf_scl_httpd24"
        },
        {
            "file": "/opt/rh/httpd24/root/etc/httpd/conf.d/()*.+\\.conf",
            "pattern": [],
            "symbolic_name": "httpd_conf_scl_httpd24"
        },
        {
            "file": "/opt/rh/jbcs-httpd24/root/etc/httpd/conf/httpd.conf",
            "pattern": [],
            "symbolic_name": "httpd_conf_scl_jbcs_httpd24"
        },
        {
            "file": "/opt/rh/jbcs-httpd24/root/etc/httpd/conf.d/()*.+\\.conf",
            "pattern": [],
            "symbolic_name": "httpd_conf_scl_jbcs_httpd24"
        },
        {
            "file": "/var/log/httpd/error_log",
            "pattern": [
                "(28)No space left on device: ",
                "AH00485: scoreboard is full, not at MaxRequestWorkers",
                "ModSecurity: collections_remove_stale: Failed deleting collection",
                "Require ServerLimit > 0, setting to 1",
                "Resource temporarily unavailable",
                "and would exceed the ServerLimit value of ",
                "consider raising the MaxClients setting",
                "consider raising the MaxRequestWorkers setting",
                "exceed ServerLimit of",
                "exceeds ServerLimit value of",
                "exceeds compile time limit of",
                "exceeds compile-time limit of",
                "exit signal Segmentation fault",
                "manager_handler CONFIG error: MEM: Can't update or insert node",
                "manager_handler ENABLE-APP error: MEM: Can't update or insert context",
                "manager_handler ENABLE-APP error: MEM: Can't update or insert host alias",
                "not allowed, increasing to 1"
            ],
            "symbolic_name": "httpd_error_log"
        },
        {
            "file": "/etc/sysconfig/network-scripts/()*ifcfg-.*",
            "pattern": [],
            "symbolic_name": "ifcfg"
        },
        {
            "file": "/etc/ImageMagick/()*policy\\.xml",
            "pattern": [
                "</policymap>",
                "<policy",
                "<policymap>"
            ],
            "symbolic_name": "imagemagick_policy"
        },
        {
            "file": "/usr/lib64/ImageMagick-6.5.4/config/()*policy\\.xml",
            "pattern": [
                "</policymap>",
                "<policy",
                "<policymap>"
            ],
            "symbolic_name": "imagemagick_policy"
        },
        {
            "file": "/usr/lib/ImageMagick-6.5.4/config/()*policy\\.xml",
            "pattern": [
                "</policymap>",
                "<policy",
                "<policymap>"
            ],
            "symbolic_name": "imagemagick_policy"
        },
        {
            "file": "/etc/vmware-tools/tools.conf",
            "pattern": [],
            "symbolic_name": "vmware_tools_conf"
        },
        {
            "file": "/proc/interrupts",
            "pattern": [],
            "symbolic_name": "interrupts"
        },
        {
            "file": "/var/log/ipaupgrade.log",
            "pattern": [
                "wait_for_open_ports: localhost"
            ],
            "symbolic_name": "ipaupgrade_log"
        },
        {
            "file": "/etc/sysconfig/iptables",
            "pattern": [],
            "symbolic_name": "iptables_permanent"
        },
        {
            "file": "/etc/kdump.conf",
            "pattern": [],
            "symbolic_name": "kdump_conf"
        },
        {
            "file": "/sys/kernel/kexec_crash_size",
            "pattern": [],
            "symbolic_name": "kexec_crash_size"
        },
        {
            "file": "/etc/()*krb5\\.conf",
            "pattern": [],
            "symbolic_name": "krb5"
        },
        {
            "file": "/etc/krb5.conf.d/()*.*\\.conf",
            "pattern": [],
            "symbolic_name": "krb5_conf_d"
        },
        {
            "file": "/sys/kernel/mm/ksm/run",
            "pattern": [],
            "symbolic_name": "ksmstate"
        },
        {
            "file": "/etc/security/()*limits\\.conf",
            "pattern": [],
            "symbolic_name": "limits_conf"
        },
        {
            "file": "/etc/security/limits.d/()*.*\\.conf",
            "pattern": [],
            "symbolic_name": "limits_d"
        },
        {
            "file": "/etc/lvm/lvm.conf",
            "pattern": [
                "auto_activation_volume_list",
                "filter",
                "locking_type",
                "thin_pool_autoextend",
                "volume_list"
            ],
            "symbolic_name": "lvm_conf"
        },
        {
            "file": "/var/log/mariadb/mariadb.log",
            "pattern": [
                "Duplicate entry",
                "Too many open files",
                "for key 'PRIMARY'"
            ],
            "symbolic_name": "mariadb_log"
        },
        {
            "file": "/proc/mdstat",
            "pattern": [],
            "symbolic_name": "mdstat"
        },
        {
            "file": "/proc/meminfo",
            "pattern": [],
            "symbolic_name": "meminfo"
        },
        {
            "file": "/var/log/messages",
            "pattern": [
                " disconnect jid=",
                "11000 E11000 duplicate key error index: pulp_database.repo_profile_applicability.$profile_hash_-1_repo_id_-1",
                ": Machine check events logged",
                ": segfault at ",
                ": session replaced: jid=",
                "Abort command issued",
                "DMA Status error.  Resetting chip",
                "Dazed and confused, but trying to continue",
                "Detected Tx Unit Hang",
                "Device offlined - not ready after error recovery",
                "Error deleting EBS Disk volume aws",
                "Error in FW/Card",
                "Error running DeviceResume dm_task_run failed",
                "Failed to bind socket: No such file or directory",
                "Link down",
                "List /apis/image.openshift.io/v1/images",
                "MDC/MDIO access timeout",
                "Machine Check Exception",
                "Medium access timeout failure. Offlining disk!",
                "Neighbour table overflow",
                "Out of MCCQ wrbs",
                "Out of memory: kill process",
                "Resolv.conf file '/etc/resolv.conf' contains search line consisting of more than 3 domains",
                "SCSI device reset on",
                "SDN initialization failed: Error: Existing service with IP: None is not part of service network",
                "Sense Key : Illegal Request [current]",
                "TX stuck with port_enabled=1: resetting channels",
                "Temperature above threshold",
                "This system does not support \"SSSE3\"",
                "Uhhuh. NMI received for unknown reason",
                "Virtualization daemon",
                "WRITE SAME failed. Manually zeroing",
                "] trap divide error ",
                "belongs to docker.service",
                "blocked FC remote port time out",
                "callbacks suppressed",
                "chardev: opening backend \"socket\" failed",
                "does not seem to be present, delaying initialization",
                "error Error on attach: Node not found",
                "ext4_ext_search_left",
                "failed while handling",
                "failed: Connection amqps:",
                "fiid_obj_get: 'present_countdown_value': data not available",
                "firewalld - dynamic firewall daemon",
                "fit failure summary on nodes : Insufficient pods",
                "heated above trip temperature",
                "http2: no cached connection was available",
                "in libnl.so.1",
                "initiating reset due to tx timeout",
                "irq handler for vector (irq -1)",
                "is beyond advertised capabilities",
                "kernel: CIFS VFS: Unexpected SMB signature",
                "kernel: bnx2fc: byte_count",
                "kernel: kvm: disabled by bios",
                "kernel: lockd: Unknown symbol register_inet6addr_notifier",
                "kernel: lockd: Unknown symbol unregister_inet6addr_notifier",
                "kernel: megasas: Found FW in FAULT state,will reset adapter.",
                "khash_super_prune_nolock",
                "megaraid_sas: FW detected to be in faultstate, restarting it",
                "mode:0x20",
                "multipathd.service operation timed out. Terminating",
                "netlink_socket|ERR|fcntl: Too many open file",
                "nf_conntrack: expectation table full",
                "nf_conntrack: table full, dropping packet",
                "page allocation failure",
                "per_source_limit from",
                "reservation conflict",
                "segfault at",
                "server kernel: rhsmcertd-worke",
                "shm_open failed, Permission denied",
                "skb_copy",
                "skb_over_panic",
                "start request repeated too quickly for docker.service",
                "swapper: page allocation failure",
                "systemd: Unit ip6tables.service entered failed state",
                "systemd: Unit iptables.service entered failed state",
                "systemd[1]: Received SIGCHLD from PID",
                "tg3_start_xmit",
                "timeout; kill it",
                "udev: renamed network interface",
                "unknown filesystem type 'binfmt_misc'",
                "vdsm-tool: EnvironmentError: Failed to restore the persisted networks"
            ],
            "symbolic_name": "messages"
        },
        {
            "file": "/etc/()*modprobe\\.conf",
            "pattern": [],
            "symbolic_name": "modprobe_conf"
        },
        {
            "file": "/etc/modprobe.d/()*.*\\.conf",
            "pattern": [],
            "symbolic_name": "modprobe_d"
        },
        {
            "file": "/etc/()*mongod.conf",
            "pattern": [
                "dbpath",
                "destination",
                "syslog",
                "systemLog"
            ],
            "symbolic_name": "mongod_conf"
        },
        {
            "file": "/etc/multipath.conf",
            "pattern": [],
            "symbolic_name": "multipath_conf"
        },
        {
            "file": "/etc/sysconfig/netconsole",
            "pattern": [],
            "symbolic_name": "netconsole"
        },
        {
            "file": "/etc/NetworkManager/dispatcher.d/.*-dhclient",
            "pattern": [],
            "symbolic_name": "networkmanager_dispatcher_d"
        },
        {
            "file": "/proc/net/netfilter/nfnetlink_queue",
            "pattern": [],
            "symbolic_name": "nfnetlink_queue"
        },
        {
            "file": "/etc/exports",
            "pattern": [
                "*",
                "no_root_squash"
            ],
            "symbolic_name": "nfs_exports"
        },
        {
            "file": "/etc/exports.d/()*.*\\.exports",
            "pattern": [
                "*",
                "no_root_squash"
            ],
            "symbolic_name": "nfs_exports_d"
        },
        {
            "file": "/etc/nginx/()*nginx.conf",
            "pattern": [],
            "symbolic_name": "nginx_conf"
        },
        {
            "file": "/etc/opt/rh/rh-nginx112/nginx/()*nginx.conf",
            "pattern": [],
            "symbolic_name": "nginx_conf"
        },
        {
            "file": "/opt/rh/nginx14/root/etc/nginx/()*nginx.conf",
            "pattern": [],
            "symbolic_name": "nginx_conf"
        },
        {
            "file": "/opt/rh/nginx16/root/etc/nginx/()*nginx.conf",
            "pattern": [],
            "symbolic_name": "nginx_conf"
        },
        {
            "file": "/etc/opt/rh/rh-nginx110/nginx/()*nginx.conf",
            "pattern": [],
            "symbolic_name": "nginx_conf"
        },
        {
            "file": "/etc/opt/rh/rh-nginx18/nginx/()*nginx.conf",
            "pattern": [],
            "symbolic_name": "nginx_conf"
        },
        {
            "file": "/var/log/nova/nova-api.log",
            "pattern": [
                "Timed out waiting for a reply to message ID"
            ],
            "symbolic_name": "nova_api_log"
        },
        {
            "file": "/var/log/containers/nova/nova-api.log",
            "pattern": [
                "Timed out waiting for a reply to message ID"
            ],
            "symbolic_name": "nova_api_log"
        },
        {
            "file": "/var/log/nova/nova-compute.log",
            "pattern": [
                "/console.log: Permission denied",
                ": No such device or address",
                "Could not open ",
                "During sync_power_state the instance has a pending task",
                "ERROR oslo_messaging.rpc.server Command: scp -r",
                "Instance shutdown by itself. Calling the stop API.",
                "Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+ssh",
                "Resuming guest",
                "Successfully plugged vif VIFBridge",
                "cmt=off: Property '.cmt' not found",
                "does not match source",
                "error: Failed to start domain",
                "libvirt-guests.sh",
                "libvirtError: Unable to delete file /var/lib/nova/instances/",
                "unsupported configuration: Target device drive address",
                "unsupported configuration: Unable to find security driver for model selinux"
            ],
            "symbolic_name": "nova_compute_log"
        },
        {
            "file": "/var/log/containers/nova/nova-compute.log",
            "pattern": [
                "/console.log: Permission denied",
                ": No such device or address",
                "Could not open ",
                "During sync_power_state the instance has a pending task",
                "ERROR oslo_messaging.rpc.server Command: scp -r",
                "Instance shutdown by itself. Calling the stop API.",
                "Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+ssh",
                "Resuming guest",
                "Successfully plugged vif VIFBridge",
                "cmt=off: Property '.cmt' not found",
                "does not match source",
                "error: Failed to start domain",
                "libvirt-guests.sh",
                "libvirtError: Unable to delete file /var/lib/nova/instances/",
                "unsupported configuration: Target device drive address",
                "unsupported configuration: Unable to find security driver for model selinux"
            ],
            "symbolic_name": "nova_compute_log"
        },
        {
            "file": "/etc/nova/nova.conf",
            "pattern": [],
            "symbolic_name": "nova_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/nova/etc/nova/nova.conf",
            "pattern": [],
            "symbolic_name": "nova_conf"
        },
        {
            "file": "/etc/nscd.conf",
            "pattern": [
                "enable-cache"
            ],
            "symbolic_name": "nscd_conf"
        },
        {
            "file": "/etc/nsswitch.conf",
            "pattern": [
                "HOSTS:",
                "Hosts:",
                "hosts:"
            ],
            "symbolic_name": "nsswitch_conf"
        },
        {
            "file": "/etc/ntp.conf",
            "pattern": [],
            "symbolic_name": "ntp_conf"
        },
        {
            "file": "/etc/odbc.ini",
            "pattern": [
                "DRIVER",
                "Driver",
                "NO_SSPS",
                "No_ssps",
                "SERVER",
                "Server",
                "[",
                "driver",
                "no_ssps",
                "server"
            ],
            "symbolic_name": "odbc_ini"
        },
        {
            "file": "/etc/odbcinst.ini",
            "pattern": [],
            "symbolic_name": "odbcinst_ini"
        },
        {
            "file": "/etc/origin/master/master-config.yaml",
            "pattern": [],
            "symbolic_name": "ose_master_config"
        },
        {
            "file": "/etc/origin/node/node-config.yaml",
            "pattern": [],
            "symbolic_name": "ose_node_config"
        },
        {
            "file": "/var/log/pacemaker.log",
            "pattern": [
                "pcmk_dbus_find_error"
            ],
            "symbolic_name": "pacemaker_log"
        },
        {
            "file": "/etc/pam.d/password-auth",
            "pattern": [],
            "symbolic_name": "password_auth"
        },
        {
            "file": "/etc/yum/pluginconf.d/()*\\w+\\.conf",
            "pattern": [],
            "symbolic_name": "pluginconf_d"
        },
        {
            "file": "/var/lib/pgsql/data/postgresql.conf",
            "pattern": [],
            "symbolic_name": "postgresql_conf"
        },
        {
            "file": "/etc/sysconfig/puppetserver",
            "pattern": [
                "JAVA_ARGS"
            ],
            "symbolic_name": "puppetserver_config"
        },
        {
            "file": "/var/lib/pgsql/data/pg_log/()*postgresql-.+\\.log",
            "pattern": [
                "ERROR:",
                "FATAL",
                "checkpoints are occurring too frequently",
                "connection limit exceeded for non-superusers",
                "database is not accepting commands to avoid wraparound data loss in database",
                "must be vacuumed within",
                "remaining connection slots are reserved for non-replication superuser connections"
            ],
            "symbolic_name": "postgresql_log"
        },
        {
            "file": "/proc/net/snmp",
            "pattern": [],
            "symbolic_name": "proc_snmp_ipv4"
        },
        {
            "file": "/proc/net/snmp6",
            "pattern": [],
            "symbolic_name": "proc_snmp_ipv6"
        },
        {
            "file": "/proc/stat",
            "pattern": [],
            "symbolic_name": "proc_stat"
        },
        {
            "file": "/sos_commands/process/ps_auxwww",
            "pattern": [],
            "symbolic_name": "ps_auxwww"
        },
        {
            "file": "/etc/libvirt/qemu.conf",
            "pattern": [],
            "symbolic_name": "qemu_conf"
        },
        {
            "file": "/etc/libvirt/qemu/()*.+\\.xml",
            "pattern": [],
            "symbolic_name": "qemu_xml"
        },
        {
            "file": "/etc/rabbitmq/rabbitmq-env.conf",
            "pattern": [],
            "symbolic_name": "rabbitmq_env"
        },
        {
            "file": "/var/log/rabbitmq/startup_log",
            "pattern": [
                "Event crashed log handler:"
            ],
            "symbolic_name": "rabbitmq_startup_log"
        },
        {
            "file": "/etc/rc.d/rc.local",
            "pattern": [],
            "symbolic_name": "rc_local"
        },
        {
            "file": "/etc/redhat-release",
            "pattern": [],
            "symbolic_name": "redhat_release"
        },
        {
            "file": "/etc/resolv.conf",
            "pattern": [],
            "symbolic_name": "resolv_conf"
        },
        {
            "file": "/etc/opt/rh/rh-mongodb26/()*mongod.conf",
            "pattern": [
                "destination",
                "syslog",
                "systemLog"
            ],
            "symbolic_name": "rh_mongodb26_conf"
        },
        {
            "file": "/etc/sysconfig/rhn/()*rhn-entitlement-cert\\.xml.*",
            "pattern": [],
            "symbolic_name": "rhn_entitlement_cert_xml"
        },
        {
            "file": "/etc/rhn/rhn.conf",
            "pattern": [],
            "symbolic_name": "rhn_conf"
        },
        {
            "file": "/usr/share/rhn/config-defaults/rhn_hibernate.conf",
            "pattern": [],
            "symbolic_name": "rhn_hibernate_conf"
        },
        {
            "file": "/var/log/rhn/search/rhn_search_daemon.log",
            "pattern": [
                "APPARENT DEADLOCK!"
            ],
            "symbolic_name": "rhn_search_daemon_log"
        },
        {
            "file": "/var/log/rhn/rhn_taskomatic_daemon.log",
            "pattern": [],
            "symbolic_name": "rhn_taskomatic_daemon_log"
        },
        {
            "file": "/etc/rhsm/rhsm.conf",
            "pattern": [],
            "symbolic_name": "rhsm_conf"
        },
        {
            "file": "/etc/qpid/qpidd.conf",
            "pattern": [],
            "symbolic_name": "qpidd_conf"
        },
        {
            "file": "/etc/rhsm/facts/virt_uuid.facts",
            "pattern": [],
            "symbolic_name": "virt_uuid_facts"
        },
        {
            "file": "/var/log/rhsm/rhsm.log",
            "pattern": [
                "KeyError: 'config.network.dnsConfig.hostName'",
                "Validation failed: Name is invalid",
                "virt.host_type=hyperv, virt.uuid=Not Settable"
            ],
            "symbolic_name": "rhsm_log"
        },
        {
            "file": "/etc/rsyslog.conf",
            "pattern": [
                "imjournal",
                "imtcp",
                "regex"
            ],
            "symbolic_name": "rsyslog_conf"
        },
        {
            "file": "/etc/samba/smb.conf",
            "pattern": [
                "GLOBAL",
                "Global",
                "KERBEROS METHOD",
                "Kerberos Method",
                "MAX SMBD PROCESSES",
                "Max Smbd Processes",
                "NT PIPE SUPPORT",
                "Nt Pipe Support",
                "REALM",
                "Realm",
                "SECURITY",
                "Security",
                "[",
                "comment",
                "global",
                "kerberos method",
                "max smbd processes",
                "nt pipe support",
                "path",
                "read only",
                "realm",
                "security",
                "writable"
            ],
            "symbolic_name": "samba"
        },
        {
            "file": "/usr/share/foreman/lib/satellite/version.rb",
            "pattern": [],
            "symbolic_name": "satellite_version_rb"
        },
        {
            "file": "/proc/scsi/scsi",
            "pattern": [],
            "symbolic_name": "scsi"
        },
        {
            "file": "/var/log/secure",
            "pattern": [
                "error: session_pty_req: session"
            ],
            "symbolic_name": "secure"
        },
        {
            "file": "/etc/selinux/config",
            "pattern": [],
            "symbolic_name": "selinux_config"
        },
        {
            "file": "/etc/sysconfig/foreman-tasks",
            "pattern": [
                "EXECUTOR_MEMORY_LIMIT",
                "EXECUTOR_MEMORY_MONITOR_DELAY",
                "EXECUTOR_MEMORY_MONITOR_INTERVAL"
            ],
            "symbolic_name": "foreman_tasks_config"
        },
        {
            "file": "/proc/net/softnet_stat",
            "pattern": [],
            "symbolic_name": "softnet_stat"
        },
        {
            "file": "/etc/ssh/sshd_config",
            "pattern": [
                "ALLOWUSERS",
                "AllowUsers",
                "Allowusers",
                "CHALLENGERESPONSEAUTHENTICATION",
                "CIPHERS",
                "CLIENTALIVECOUNTMAX",
                "CLIENTALIVEINTERVAL",
                "ChallengeResponseAuthentication",
                "Challengeresponseauthentication",
                "Ciphers",
                "ClientAliveCountMax",
                "ClientAliveInterval",
                "Clientalivecountmax",
                "Clientaliveinterval",
                "DENYUSERS",
                "DenyUsers",
                "Denyusers",
                "KBDINTERACTIVEAUTHENTICATION",
                "KbdInteractiveAuthentication",
                "Kbdinteractiveauthentication",
                "LOGINGRACETIME",
                "LoginGraceTime",
                "Logingracetime",
                "MACS",
                "MACs",
                "MAXAUTHTRIES",
                "MAXSTARTUPS",
                "Macs",
                "Match",
                "MaxAuthTries",
                "MaxStartups",
                "Maxauthtries",
                "Maxstartups",
                "PERMITEMPTYPASSWORDS",
                "PERMITROOTLOGIN",
                "PROTOCOL",
                "PasswordAuthentication",
                "PermitEmptyPasswords",
                "PermitRootLogin",
                "Permitemptypasswords",
                "Permitrootlogin",
                "Protocol",
                "USEPAM",
                "UsePAM",
                "UsePam",
                "Usepam",
                "allowusers",
                "challengeresponseauthentication",
                "ciphers",
                "clientalivecountmax",
                "clientaliveinterval",
                "denyusers",
                "kbdinteractiveauthentication",
                "logingracetime",
                "macs",
                "maxauthtries",
                "maxstartups",
                "permitemptypasswords",
                "permitrootlogin",
                "protocol",
                "usepam"
            ],
            "symbolic_name": "sshd_config"
        },
        {
            "file": "/etc/ssh/ssh_config",
            "pattern": [
                "Host",
                "ProxyCommand"
            ],
            "symbolic_name": "ssh_config"
        },
        {
            "file": "/usr/share/foreman/.ssh/ssh_config",
            "pattern": [
                "Host",
                "ProxyCommand"
            ],
            "symbolic_name": "ssh_foreman_config"
        },
        {
            "file": "/etc/swift/object-expirer.conf",
            "pattern": [],
            "symbolic_name": "swift_object_expirer_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/swift/etc/swift/object-expirer.conf",
            "pattern": [],
            "symbolic_name": "swift_object_expirer_conf"
        },
        {
            "file": "/etc/swift/proxy-server.conf",
            "pattern": [],
            "symbolic_name": "swift_proxy_server_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/swift/etc/swift/proxy-server.conf",
            "pattern": [],
            "symbolic_name": "swift_proxy_server_conf"
        },
        {
            "file": "/etc/sysconfig/kdump",
            "pattern": [],
            "symbolic_name": "sysconfig_kdump"
        },
        {
            "file": "/etc/sysconfig/libvirt-guests",
            "pattern": [],
            "symbolic_name": "sysconfig_libvirt_guests"
        },
        {
            "file": "/etc/sysconfig/memcached",
            "pattern": [],
            "symbolic_name": "sysconfig_memcached"
        },
        {
            "file": "/var/lib/config-data/memcached/etc/sysconfig/memcached",
            "pattern": [],
            "symbolic_name": "sysconfig_memcached"
        },
        {
            "file": "/etc/sysconfig/()*mongod",
            "pattern": [],
            "symbolic_name": "sysconfig_mongod"
        },
        {
            "file": "/etc/sysconfig/ntpd",
            "pattern": [],
            "symbolic_name": "sysconfig_ntpd"
        },
        {
            "file": "/etc/opt/rh/rh-mongodb26/sysconfig/()*mongod",
            "pattern": [],
            "symbolic_name": "sysconfig_rh_mongodb26"
        },
        {
            "file": "/etc/sysconfig/prelink",
            "pattern": [],
            "symbolic_name": "sysconfig_prelink"
        },
        {
            "file": "/etc/sysconfig/virt-who",
            "pattern": [],
            "symbolic_name": "sysconfig_virt_who"
        },
        {
            "file": "/etc/sysctl.conf",
            "pattern": [],
            "symbolic_name": "sysctl_conf"
        },
        {
            "file": "/etc/systemd/logind.conf",
            "pattern": [],
            "symbolic_name": "systemd_logind_conf"
        },
        {
            "file": "/usr/lib/systemd/system/docker.service",
            "pattern": [],
            "symbolic_name": "systemd_docker"
        },
        {
            "file": "/usr/lib/systemd/system/atomic-openshift-node.service",
            "pattern": [],
            "symbolic_name": "systemd_openshift_node"
        },
        {
            "file": "/etc/systemd/system.conf",
            "pattern": [],
            "symbolic_name": "systemd_system_conf"
        },
        {
            "file": "/etc/sysconfig/rhn/systemid",
            "pattern": [],
            "symbolic_name": "systemid"
        },
        {
            "file": "/sys/kernel/mm/transparent_hugepage/enabled",
            "pattern": [],
            "symbolic_name": "thp_enabled"
        },
        {
            "file": "/sys/kernel/mm/transparent_hugepage/use_zero_page",
            "pattern": [],
            "symbolic_name": "thp_use_zero_page"
        },
        {
            "file": "/etc/tmpfiles.d/()*.*\\.conf",
            "pattern": [],
            "symbolic_name": "tmpfilesd"
        },
        {
            "file": "/usr/lib/tmpfiles.d/()*.*\\.conf",
            "pattern": [],
            "symbolic_name": "tmpfilesd"
        },
        {
            "file": "/run/tmpfiles.d/()*.*\\.conf",
            "pattern": [],
            "symbolic_name": "tmpfilesd"
        },
        {
            "file": "/etc/sysconfig/rhn/up2date",
            "pattern": [],
            "symbolic_name": "up2date"
        },
        {
            "file": "/var/log/up2date",
            "pattern": [
                "Temporary failure in name resolution"
            ],
            "symbolic_name": "up2date_log"
        },
        {
            "file": "/usr/lib/systemd/journald.conf.d/()*.+\\.conf",
            "pattern": [],
            "symbolic_name": "usr_journald_conf_d"
        },
        {
            "file": "/etc/vdsm/vdsm.conf",
            "pattern": [],
            "symbolic_name": "vdsm_conf"
        },
        {
            "file": "/var/log/vdsm/vdsm.log",
            "pattern": [
                "(mailbox-spm) [storage.Misc.excCmd] /usr/bin/taskset --cpu-list",
                "Changed state to Down: 'NoneType' object has no attribute 'attrib'",
                "Changed state to Down: internal error: Attempted double use of PCI slot",
                "ERROR (mailbox-spm) [storage.MailBox.SpmMailMonitor]",
                "RPC call Host.setupNetworks failed",
                "Stopping connection",
                "The name org.fedoraproject.FirewallD1 was not provided by any .service files",
                "The vm start process failed",
                "_report_inconsistency",
                "lastCheck",
                "libvirtError: internal error: failed to format device alias",
                "looking for unfetched domain"
            ],
            "symbolic_name": "vdsm_log"
        },
        {
            "file": "/etc/vdsm/vdsm.id",
            "pattern": [],
            "symbolic_name": "vdsm_id"
        },
        {
            "file": "/etc/vdsm/logger.conf",
            "pattern": [],
            "symbolic_name": "vdsm_logger_conf"
        },
        {
            "file": "/etc/()*virt-who\\.conf",
            "pattern": [
                "[",
                "configs",
                "debug",
                "env",
                "interval",
                "log_",
                "oneshot",
                "owner",
                "server",
                "type"
            ],
            "symbolic_name": "virt_who_conf"
        },
        {
            "file": "/etc/virt-who.d/()*.*\\.conf",
            "pattern": [
                "[",
                "configs",
                "debug",
                "env",
                "interval",
                "log_",
                "oneshot",
                "owner",
                "server",
                "type"
            ],
            "symbolic_name": "virt_who_conf"
        },
        {
            "file": "/etc/libvirt/virtlogd.conf",
            "pattern": [
                "max_size"
            ],
            "symbolic_name": "virtlogd_conf"
        },
        {
            "file": "/etc/pam.d/vsftpd",
            "pattern": [],
            "symbolic_name": "vsftpd"
        },
        {
            "file": "/etc/vsftpd/vsftpd.conf",
            "pattern": [
                "LOCAL_ENABLE",
                "Local_Enable",
                "SSL_ENABLE",
                "SSL_SSLV3",
                "Ssl_Enable",
                "Ssl_Sslv3",
                "local_enable",
                "ssl_enable",
                "ssl_sslv3"
            ],
            "symbolic_name": "vsftpd_conf"
        },
        {
            "file": "/sys/kernel/debug/x86/ibpb_enabled",
            "pattern": [],
            "symbolic_name": "x86_ibpb_enabled"
        },
        {
            "file": "/sys/kernel/debug/x86/ibrs_enabled",
            "pattern": [],
            "symbolic_name": "x86_ibrs_enabled"
        },
        {
            "file": "/sys/kernel/debug/x86/pti_enabled",
            "pattern": [],
            "symbolic_name": "x86_pti_enabled"
        },
        {
            "file": "/etc/()*xinetd\\.conf",
            "pattern": [],
            "symbolic_name": "xinetd_conf"
        },
        {
            "file": "/etc/xinetd.d/()*.*",
            "pattern": [],
            "symbolic_name": "xinetd_conf"
        },
        {
            "file": "/etc/yum.conf",
            "pattern": [],
            "symbolic_name": "yum_conf"
        },
        {
            "file": "/etc/yum.repos.d/()*.*\\.repo",
            "pattern": [],
            "symbolic_name": "yum_repos_d"
        },
        {
            "file": "/var/log/redhat-access-insights/redhat-access-insights.log",
            "pattern": [],
            "symbolic_name": "redhat_access_insights_log"
        },
        {
            "file": "/var/log/redhat_access_proactive/redhat_access_proactive.log",
            "pattern": [],
            "symbolic_name": "redhat_access_proactive_log"
        },
        {
            "file": "/etc/logrotate.conf",
            "pattern": [],
            "symbolic_name": "logrotate_conf"
        },
        {
            "file": "/etc/logrotate.d/().*",
            "pattern": [],
            "symbolic_name": "logrotate_conf"
        },
        {
            "file": "/var/log/containers/gnocchi/gnocchi-metricd.log",
            "pattern": [
                "ObjectNotFound: error opening pool 'metrics'"
            ],
            "symbolic_name": "gnocchi_metricd_log"
        },
        {
            "file": "/var/log/gnocchi/metricd.log",
            "pattern": [
                "ObjectNotFound: error opening pool 'metrics'"
            ],
            "symbolic_name": "gnocchi_metricd_log"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/gnocchi/etc/gnocchi/gnocchi.conf",
            "pattern": [
                "[",
                "ceph_pool",
                "driver",
                "storage"
            ],
            "symbolic_name": "gnocchi_conf"
        },
        {
            "file": "/etc/gnocchi/gnocchi.conf",
            "pattern": [
                "[",
                "ceph_pool",
                "driver",
                "storage"
            ],
            "symbolic_name": "gnocchi_conf"
        },
        {
            "file": "/etc/neutron/neutron.conf",
            "pattern": [
                "[",
                "dhcp_agents_per_network"
            ],
            "symbolic_name": "neutron_conf"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/neutron/etc/neutron/neutron.conf",
            "pattern": [
                "[",
                "dhcp_agents_per_network"
            ],
            "symbolic_name": "neutron_conf"
        },
        {
            "file": "/etc/neutron/plugin.ini",
            "pattern": [],
            "symbolic_name": "neutron_plugin_ini"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/neutron/etc/neutron/plugin.ini",
            "pattern": [],
            "symbolic_name": "neutron_plugin_ini"
        },
        {
            "file": "/etc/zipl.conf",
            "pattern": [],
            "symbolic_name": "zipl_conf"
        },
        {
            "file": "/etc/smart_proxy_dynflow_core/settings.yml",
            "pattern": [
                ":database:"
            ],
            "symbolic_name": "smartpdc_settings"
        },
        {
            "file": "/etc/neutron/l3_agent.ini",
            "pattern": [
                "[",
                "agent_mode"
            ],
            "symbolic_name": "neutron_l3_agent_ini"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/neutron/etc/neutron/l3_agent.ini",
            "pattern": [
                "[",
                "agent_mode"
            ],
            "symbolic_name": "neutron_l3_agent_ini"
        },
        {
            "file": "/var/log/neutron/l3-agent.log",
            "pattern": [
                "Duplicate iptables rule detected",
                "Error while deleting router",
                "Stderr: Another app is currently holding the xtables lock"
            ],
            "symbolic_name": "neutron_l3_agent_log"
        },
        {
            "file": "/etc/neutron/metadata_agent.ini",
            "pattern": [
                "[",
                "auth_url"
            ],
            "symbolic_name": "neutron_metadata_agent_ini"
        },
        {
            "file": "/var/lib/config-data/puppet-generated/neutron/etc/neutron/metadata_agent.ini",
            "pattern": [
                "[",
                "auth_url"
            ],
            "symbolic_name": "neutron_metadata_agent_ini"
        },
        {
            "file": "/var/log/neutron/metadata-agent.log",
            "pattern": [
                "Unauthorized: {\"error\": {\"message\": \"The resource could not be found.\", \"code\": 404, \"title\": \"Not Found\"}}"
            ],
            "symbolic_name": "neutron_metadata_agent_log"
        },
        {
            "file": "/var/log/containers/neutron/metadata-agent.log",
            "pattern": [
                "Unauthorized: {\"error\": {\"message\": \"The resource could not be found.\", \"code\": 404, \"title\": \"Not Found\"}}"
            ],
            "symbolic_name": "neutron_metadata_agent_log"
        },
        {
            "file": "/var/log/neutron/openvswitch-agent.log",
            "pattern": [
                "Agent main thread died of an exception",
                "neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_ryuapp",
                "u'device_owner': u'network:router_interface_distributed'"
            ],
            "symbolic_name": "neutron_ovs_agent_log"
        },
        {
            "file": "/var/log/containers/neutron/openvswitch-agent.log",
            "pattern": [
                "Agent main thread died of an exception",
                "neutron.plugins.ml2.drivers.openvswitch.agent.openflow.native.ovs_ryuapp",
                "u'device_owner': u'network:router_interface_distributed'"
            ],
            "symbolic_name": "neutron_ovs_agent_log"
        },
        {
            "file": "/usr/sap/hostctrl/exe/host_profile",
            "pattern": [
                "DIR_",
                "IP_LOCAL_PORT_RANGE",
                "SAPSYSTEM",
                "reserved_port/enable",
                "reserved_port/range"
            ],
            "symbolic_name": "sap_host_profile"
        }
    ],
    "globs": [
        {
            "glob": "/sys/devices/system/cpu/cpu[0-9]*/online",
            "symbolic_name": "cpu_cores",
            "pattern": []
        },
        {
            "glob": "/sys/devices/system/cpu/cpu[0-9]*/topology/thread_siblings_list",
            "symbolic_name": "cpu_siblings",
            "pattern": []
        },
        {
            "glob": "/sys/devices/system/cpu/vulnerabilities/*",
            "symbolic_name": "cpu_vulns",
            "pattern": []
        },
        {
            "glob": "/sys/class/net/*/address",
            "symbolic_name": "mac_addresses",
            "pattern": []
        },
        {
            "glob": "/sys/class/net/bond[0-9]*/bonding/tlb_dynamic_lb",
            "symbolic_name": "bond_dynamic_lb",
            "pattern": []
        },
        {
            "glob": "/var/opt/amq-broker/*/etc/broker.xml",
            "symbolic_name": "amq_broker",
            "pattern": []
        },
        {
            "glob": "/sys/fs/cgroup/cpu/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod[a-f0-9_]*.slice/cpu.cfs_quota_us",
            "symbolic_name": "kubepods_cpu_quota",
            "pattern": []
        },
        {
            "glob": "/sys/class/scsi_host/host[0-9]*/eh_deadline",
            "symbolic_name": "scsi_eh_deadline",
            "pattern": []
        },
        {
            "glob": "/sys/class/scsi_host/host[0-9]*/fwrev",
            "symbolic_name": "scsi_fwver",
            "pattern": []
        }
    ],
    "meta_specs": {
        "analysis_target": {
            "archive_file_name": "/insights_data/analysis_target"
        },
        "branch_info": {
            "archive_file_name": "/branch_info"
        },
        "machine-id": {
            "archive_file_name": "/insights_data/machine-id"
        },
        "metadata.json": {
            "archive_file_name": "metadata.json"
        },
        "uploader_log": {
            "archive_file_name": "/insights_data/insights_logs/insights.log"
        }
    },
    "pre_commands": {
        "iface": "/sbin/ip -o link | awk -F ': ' '/.*link\\/ether/ {print $2}'"
    },
    "specs": {
        "audit_log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/audit/audit.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/audit/audit.log",
                    "pattern": [
                        "comm=\"mongod\"",
                        "denied",
                        "type=AVC"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/audit/audit.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/audit/audit.log",
                    "pattern": [
                        "comm=\"mongod\"",
                        "denied",
                        "type=AVC"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/audit/audit.log",
                    "file": "/var/log/audit/audit.log",
                    "pattern": [
                        "comm=\"mongod\"",
                        "denied",
                        "type=AVC"
                    ]
                }
            ]
        },
        "auditd.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/audit/auditd.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/audit/auditd.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/audit/auditd.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/audit/auditd.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/audit/auditd.conf",
                    "file": "/etc/audit/auditd.conf",
                    "pattern": []
                }
            ]
        },
        "blkid": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/blkid_-c_.dev.null",
                    "command": "/sbin/blkid -c /dev/null",
                    "pattern": []
                }
            ]
        },
        "bond": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/net/bonding/()*bond.*",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/proc/net/bonding/()*bond.*",
                    "pattern": []
                }
            ]
        },
        "brctl_show": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/brctl_show",
                    "command": "/usr/sbin/brctl show",
                    "pattern": []
                }
            ]
        },
        "catalina.out": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/tomcat/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/tomcat6/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/tomcat-logs/tomcat/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/tomcat-logs/tomcat6/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/tomcat/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/tomcat6/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/tomcat-logs/tomcat/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/tomcat-logs/tomcat6/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/var/log/tomcat/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/var/log/tomcat6/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/tomcat-logs/tomcat/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/tomcat-logs/tomcat6/()*catalina\\.out",
                    "pattern": [
                        "APPARENT DEADLOCK!",
                        "NoCobblerTokenException: We had an error trying to login."
                    ]
                }
            ]
        },
        "cciss": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/driver/cciss/()*cciss.*",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/proc/driver/cciss/()*cciss.*",
                    "pattern": []
                }
            ]
        },
        "ceilometer.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/ceilometer/ceilometer.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ceilometer/ceilometer.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/ceilometer/ceilometer.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ceilometer/ceilometer.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/ceilometer/ceilometer.conf",
                    "file": "/etc/ceilometer/ceilometer.conf",
                    "pattern": []
                }
            ]
        },
        "ceph_health_detail": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ceph_health_detail_-f_json-pretty",
                    "command": "/usr/bin/ceph health detail -f json-pretty",
                    "pattern": []
                }
            ]
        },
        "ceph_osd.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/ceph/()*ceph-osd.*\\.log$",
                    "pattern": [
                        "Thread.cc"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/ceph/()*ceph-osd.*\\.log$",
                    "pattern": [
                        "Thread.cc"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/var/log/ceph/()*ceph-osd.*\\.log$",
                    "pattern": [
                        "Thread.cc"
                    ]
                }
            ]
        },
        "ceph_osd_dump": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ceph_osd_dump_-f_json-pretty",
                    "command": "/usr/bin/ceph osd dump -f json-pretty",
                    "pattern": []
                }
            ]
        },
        "ceph_osd_tree": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ceph_osd_tree_-f_json-pretty",
                    "command": "/usr/bin/ceph osd tree -f json-pretty",
                    "pattern": []
                }
            ]
        },
        "ceph_s": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ceph_-s_-f_json-pretty",
                    "command": "/usr/bin/ceph -s -f json-pretty",
                    "pattern": []
                }
            ]
        },
        "ceph_v": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ceph_-v",
                    "command": "/usr/bin/ceph -v",
                    "pattern": []
                }
            ]
        },
        "certificates_enddate": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/find_.etc.origin.node_.etc.origin.master_.etc.pki_-type_f_-exec_.usr.bin.openssl_x509_-noout_-enddate_-in_-exec_echo_FileName",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/etc/origin/node {CONTAINER_MOUNT_POINT}/etc/origin/master {CONTAINER_MOUNT_POINT}/etc/pki -type f -exec /usr/bin/openssl x509 -noout -enddate -in {} ; -exec echo 'FileName= {}' ;",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/find_.etc.origin.node_.etc.origin.master_.etc.pki_-type_f_-exec_.usr.bin.openssl_x509_-noout_-enddate_-in_-exec_echo_FileName",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/etc/origin/node {CONTAINER_MOUNT_POINT}/etc/origin/master {CONTAINER_MOUNT_POINT}/etc/pki -type f -exec /usr/bin/openssl x509 -noout -enddate -in {} ; -exec echo 'FileName= {}' ;",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/find_.etc.origin.node_.etc.origin.master_.etc.pki_-type_f_-exec_.usr.bin.openssl_x509_-noout_-enddate_-in_-exec_echo_FileName",
                    "command": "/usr/bin/find /etc/origin/node /etc/origin/master /etc/pki -type f -exec /usr/bin/openssl x509 -noout -enddate -in '{}' \\; -exec echo 'FileName= {}' \\;",
                    "pattern": []
                }
            ]
        },
        "chkconfig": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/chkconfig_--list",
                    "command": "/sbin/chkconfig --list",
                    "pattern": []
                }
            ]
        },
        "chrony.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/chrony.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/chrony.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/chrony.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/chrony.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/chrony.conf",
                    "file": "/etc/chrony.conf",
                    "pattern": []
                }
            ]
        },
        "chronyc_sources": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/chronyc_sources",
                    "command": "/usr/bin/chronyc sources",
                    "pattern": []
                }
            ]
        },
        "cib.xml": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/lib/pacemaker/cib/cib.xml",
                    "file": "{CONTAINER_MOUNT_POINT}/var/lib/pacemaker/cib/cib.xml",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/lib/pacemaker/cib/cib.xml",
                    "file": "{CONTAINER_MOUNT_POINT}/var/lib/pacemaker/cib/cib.xml",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/lib/pacemaker/cib/cib.xml",
                    "file": "/var/lib/pacemaker/cib/cib.xml",
                    "pattern": []
                }
            ]
        },
        "cinder.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/cinder/cinder.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cinder/cinder.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/cinder/cinder.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cinder/cinder.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/cinder/cinder.conf",
                    "file": "/etc/cinder/cinder.conf",
                    "pattern": []
                }
            ]
        },
        "cinder_volume.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/cinder/volume.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/cinder/volume.log",
                    "pattern": [
                        "Image cloning unsuccessful for image",
                        "Message: NFS file could not be discovered.",
                        "[Errno 24] Too many open files"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/cinder/volume.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/cinder/volume.log",
                    "pattern": [
                        "Image cloning unsuccessful for image",
                        "Message: NFS file could not be discovered.",
                        "[Errno 24] Too many open files"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/cinder/volume.log",
                    "file": "/var/log/cinder/volume.log",
                    "pattern": [
                        "Image cloning unsuccessful for image",
                        "Message: NFS file could not be discovered.",
                        "[Errno 24] Too many open files"
                    ]
                }
            ]
        },
        "cluster.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/cluster/cluster.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cluster/cluster.conf",
                    "pattern": [
                        "clusternode name="
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/cluster/cluster.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cluster/cluster.conf",
                    "pattern": [
                        "clusternode name="
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/cluster/cluster.conf",
                    "file": "/etc/cluster/cluster.conf",
                    "pattern": [
                        "clusternode name="
                    ]
                }
            ]
        },
        "cmdline": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/cmdline",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/cmdline",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/cmdline",
                    "file": "/proc/cmdline",
                    "pattern": []
                }
            ]
        },
        "cobbler_modules.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/cobbler/modules.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cobbler/modules.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/cobbler/modules.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cobbler/modules.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/cobbler/modules.conf",
                    "file": "/etc/cobbler/modules.conf",
                    "pattern": []
                }
            ]
        },
        "cobbler_settings": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/cobbler/settings",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cobbler/settings",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/cobbler/settings",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/cobbler/settings",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/cobbler/settings",
                    "file": "/etc/cobbler/settings",
                    "pattern": []
                }
            ]
        },
        "corosync": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/corosync",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/corosync",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/corosync",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/corosync",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/corosync",
                    "file": "/etc/sysconfig/corosync",
                    "pattern": []
                }
            ]
        },
        "cpuinfo": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/cpuinfo",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/cpuinfo",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/cpuinfo",
                    "file": "/proc/cpuinfo",
                    "pattern": []
                }
            ]
        },
        "current_clocksource": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/devices/system/clocksource/clocksource0/current_clocksource",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/devices/system/clocksource/clocksource0/current_clocksource",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/devices/system/clocksource/clocksource0/current_clocksource",
                    "file": "/sys/devices/system/clocksource/clocksource0/current_clocksource",
                    "pattern": []
                }
            ]
        },
        "date": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/date",
                    "command": "/bin/date",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/date",
                    "command": "/bin/date",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/date",
                    "command": "/bin/date",
                    "pattern": []
                }
            ]
        },
        "date_utc": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/date_--utc",
                    "command": "/bin/date --utc",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/date_--utc",
                    "command": "/bin/date --utc",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/date_--utc",
                    "command": "/bin/date --utc",
                    "pattern": []
                }
            ]
        },
        "dcbtool_gc_dcb": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/dcbtool_gc__dcb",
                    "command": "/sbin/dcbtool gc  dcb",
                    "pattern": [],
                    "pre_command": "iface"
                }
            ]
        },
        "df_-al": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/df_-al",
                    "command": "/bin/df -al",
                    "pattern": []
                }
            ]
        },
        "df_-alP": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/df_-alP",
                    "command": "/bin/df -alP",
                    "pattern": []
                }
            ]
        },
        "df_-li": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/df_-li",
                    "command": "/bin/df -li",
                    "pattern": []
                }
            ]
        },
        "dig_dnssec": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/dig_dnssec_._SOA",
                    "command": "/usr/bin/dig +dnssec . SOA",
                    "pattern": []
                }
            ]
        },
        "dig_edns": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/dig_edns_0_._SOA",
                    "command": "/usr/bin/dig +edns=0 . SOA",
                    "pattern": []
                }
            ]
        },
        "dig_noedns": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/dig_noedns_._SOA",
                    "command": "/usr/bin/dig +noedns . SOA",
                    "pattern": []
                }
            ]
        },
        "dirsrv_errors": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/dirsrv/.*/()*(errors|errors\\.2.*)",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/dirsrv/.*/()*(errors|errors\\.2.*)",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/var/log/dirsrv/.*/()*(errors|errors\\.2.*)",
                    "pattern": []
                }
            ]
        },
        "dmesg": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/dmesg",
                    "command": "/bin/dmesg",
                    "pattern": [
                        "CSUM",
                        "CVE-2017-1000364",
                        "Dropping TSO",
                        "FEATURE IBPB_SUPPORT",
                        "FEATURE SPEC_CTRL",
                        "Linux version",
                        "NUMA: ",
                        "SMBIOS ",
                        "WRITE SAME failed. Manually zeroing",
                        "blocked FC remote port time out",
                        "crashkernel reservation failed",
                        "crashkernel=auto resulted in zero bytes of reserved memory",
                        "ixgbevf: Unknown parameter `InterruptThrottleRate'",
                        "netconsole: network logging started",
                        "vpd r/w failed",
                        "x86/pti"
                    ]
                }
            ]
        },
        "dmidecode": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/dmidecode",
                    "command": "/usr/sbin/dmidecode",
                    "pattern": []
                }
            ]
        },
        "docker_host_machine-id": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/dockerhost/rootfs/etc/redhat-access-insights/machine-id",
                    "file": "/etc/redhat-access-insights/machine-id",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/dockerhost/rootfs/etc/redhat-access-insights/machine-id",
                    "file": "/etc/redhat-access-insights/machine-id",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_data/dockerhost/rootfs/etc/redhat-access-insights/machine-id",
                    "file": "/etc/redhat-access-insights/machine-id",
                    "pattern": []
                }
            ]
        },
        "docker_info": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/docker_info",
                    "command": "/usr/bin/docker info",
                    "pattern": []
                }
            ]
        },
        "docker_list_containers": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/docker_ps_--all_--no-trunc",
                    "command": "/usr/bin/docker ps --all --no-trunc",
                    "pattern": []
                }
            ]
        },
        "docker_list_images": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/docker_images_--all_--no-trunc_--digests",
                    "command": "/usr/bin/docker images --all --no-trunc --digests",
                    "pattern": []
                }
            ]
        },
        "docker_storage_setup": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/dockerhost/rootfs/etc/sysconfig/docker-storage-setup",
                    "file": "/etc/sysconfig/docker-storage-setup",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/dockerhost/rootfs/etc/sysconfig/docker-storage-setup",
                    "file": "/etc/sysconfig/docker-storage-setup",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_data/dockerhost/rootfs/etc/sysconfig/docker-storage-setup",
                    "file": "/etc/sysconfig/docker-storage-setup",
                    "pattern": []
                }
            ]
        },
        "docker_sysconfig": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/dockerhost/rootfs/etc/sysconfig/docker",
                    "file": "/etc/sysconfig/docker",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/dockerhost/rootfs/etc/sysconfig/docker",
                    "file": "/etc/sysconfig/docker",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_data/dockerhost/rootfs/etc/sysconfig/docker",
                    "file": "/etc/sysconfig/docker",
                    "pattern": []
                }
            ]
        },
        "engine.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/ovirt-engine/engine.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/ovirt-engine/engine.log",
                    "pattern": [
                        "CLUSTER_CANNOT_UPDATE_COMPATIBILITY_VERSION_WITH_LOWER_HOSTS",
                        "Received fatal alert: certificate_expired",
                        "has paused due to storage I/O problem"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/ovirt-engine/engine.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/ovirt-engine/engine.log",
                    "pattern": [
                        "CLUSTER_CANNOT_UPDATE_COMPATIBILITY_VERSION_WITH_LOWER_HOSTS",
                        "Received fatal alert: certificate_expired",
                        "has paused due to storage I/O problem"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/ovirt-engine/engine.log",
                    "file": "/var/log/ovirt-engine/engine.log",
                    "pattern": [
                        "CLUSTER_CANNOT_UPDATE_COMPATIBILITY_VERSION_WITH_LOWER_HOSTS",
                        "Received fatal alert: certificate_expired",
                        "has paused due to storage I/O problem"
                    ]
                }
            ]
        },
        "etc_journald.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/systemd/()*journald\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/systemd/()*journald\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/systemd/()*journald\\.conf",
                    "pattern": []
                }
            ]
        },
        "etc_journald.conf.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/systemd/journald.conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/systemd/journald.conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/systemd/journald.conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ]
        },
        "ethtool": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ethtool_",
                    "command": "/sbin/ethtool",
                    "pattern": [],
                    "pre_command": "iface"
                }
            ]
        },
        "ethtool-S": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ethtool_-S_",
                    "command": "/sbin/ethtool -S",
                    "pattern": [],
                    "pre_command": "iface"
                }
            ]
        },
        "ethtool-g": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ethtool_-g_",
                    "command": "/sbin/ethtool -g",
                    "pattern": [],
                    "pre_command": "iface"
                }
            ]
        },
        "ethtool-i": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ethtool_-i_",
                    "command": "/sbin/ethtool -i",
                    "pattern": [],
                    "pre_command": "iface"
                }
            ]
        },
        "ethtool-k": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ethtool_-k_",
                    "command": "/sbin/ethtool -k",
                    "pattern": [],
                    "pre_command": "iface"
                }
            ]
        },
        "facter": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/facter",
                    "command": "/usr/bin/facter",
                    "pattern": []
                }
            ]
        },
        "fc-match": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/fc-match_-sv_sans_regular_roman_family_fontformat",
                    "command": "/bin/fc-match -sv 'sans:regular:roman' family fontformat",
                    "pattern": []
                }
            ]
        },
        "fstab": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/fstab",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/fstab",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/fstab",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/fstab",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/fstab",
                    "file": "/etc/fstab",
                    "pattern": []
                }
            ]
        },
        "galera.cnf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/my.cnf.d/galera.cnf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/my.cnf.d/galera.cnf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/my.cnf.d/galera.cnf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/my.cnf.d/galera.cnf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/my.cnf.d/galera.cnf",
                    "file": "/etc/my.cnf.d/galera.cnf",
                    "pattern": []
                }
            ]
        },
        "getcert_list": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/getcert_list",
                    "command": "/usr/bin/getcert list",
                    "pattern": []
                }
            ]
        },
        "getenforce": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/getenforce",
                    "command": "/usr/sbin/getenforce",
                    "pattern": []
                }
            ]
        },
        "grub-efi.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/boot/efi/EFI/redhat/grub.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/efi/EFI/redhat/grub.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/boot/efi/EFI/redhat/grub.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/efi/EFI/redhat/grub.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/boot/efi/EFI/redhat/grub.conf",
                    "file": "/boot/efi/EFI/redhat/grub.conf",
                    "pattern": []
                }
            ]
        },
        "grub.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/boot/grub/grub.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/grub/grub.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/boot/grub/grub.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/grub/grub.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/boot/grub/grub.conf",
                    "file": "/boot/grub/grub.conf",
                    "pattern": []
                }
            ]
        },
        "grub1_config_perms": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-l_.boot.grub.grub.conf",
                    "command": "/bin/ls -l {CONTAINER_MOUNT_POINT}/boot/grub/grub.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-l_.boot.grub.grub.conf",
                    "command": "/bin/ls -l {CONTAINER_MOUNT_POINT}/boot/grub/grub.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-l_.boot.grub.grub.conf",
                    "command": "/bin/ls -l /boot/grub/grub.conf",
                    "pattern": []
                }
            ]
        },
        "grub2-efi.cfg": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/boot/efi/EFI/redhat/grub.cfg",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/efi/EFI/redhat/grub.cfg",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/boot/efi/EFI/redhat/grub.cfg",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/efi/EFI/redhat/grub.cfg",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/boot/efi/EFI/redhat/grub.cfg",
                    "file": "/boot/efi/EFI/redhat/grub.cfg",
                    "pattern": []
                }
            ]
        },
        "grub2.cfg": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/boot/grub2/grub.cfg",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/grub2/grub.cfg",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/boot/grub2/grub.cfg",
                    "file": "{CONTAINER_MOUNT_POINT}/boot/grub2/grub.cfg",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/boot/grub2/grub.cfg",
                    "file": "/boot/grub2/grub.cfg",
                    "pattern": []
                }
            ]
        },
        "grub_config_perms": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-l_.boot.grub2.grub.cfg",
                    "command": "/bin/ls -l {CONTAINER_MOUNT_POINT}/boot/grub2/grub.cfg",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-l_.boot.grub2.grub.cfg",
                    "command": "/bin/ls -l {CONTAINER_MOUNT_POINT}/boot/grub2/grub.cfg",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-l_.boot.grub2.grub.cfg",
                    "command": "/bin/ls -l /boot/grub2/grub.cfg",
                    "pattern": []
                }
            ]
        },
        "haproxy_cfg": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/haproxy/haproxy.cfg",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/haproxy/haproxy.cfg",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/haproxy/haproxy.cfg",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/haproxy/haproxy.cfg",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/haproxy/haproxy.cfg",
                    "file": "/etc/haproxy/haproxy.cfg",
                    "pattern": []
                }
            ]
        },
        "heat.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/heat/heat.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/heat/heat.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/heat/heat.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/heat/heat.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/heat/heat.conf",
                    "file": "/etc/heat/heat.conf",
                    "pattern": []
                }
            ]
        },
        "heat_crontab": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/crontab_-l_-u_heat",
                    "command": "/usr/bin/crontab -l -u heat",
                    "pattern": [
                        "heat-manage"
                    ]
                }
            ]
        },
        "hostname": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/hostname",
                    "command": "/bin/hostname",
                    "pattern": []
                }
            ]
        },
        "hosts": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/hosts",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/hosts",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/hosts",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/hosts",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/hosts",
                    "file": "/etc/hosts",
                    "pattern": []
                }
            ]
        },
        "httpd-V": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/httpd_-V",
                    "command": "/usr/sbin/httpd -V",
                    "pattern": []
                }
            ]
        },
        "httpd.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/httpd/conf/()*httpd\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/httpd/conf/()*httpd\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/httpd/conf/()*httpd\\.conf",
                    "pattern": []
                }
            ]
        },
        "httpd.conf.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/httpd/conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/httpd/conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/httpd/conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ]
        },
        "httpd_error_log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/httpd/error_log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/httpd/error_log",
                    "pattern": [
                        "(28)No space left on device: ",
                        "AH00485: scoreboard is full, not at MaxRequestWorkers",
                        "Require ServerLimit > 0, setting to 1",
                        "Resource temporarily unavailable",
                        "and would exceed the ServerLimit value of ",
                        "consider raising the MaxClients setting",
                        "consider raising the MaxRequestWorkers setting",
                        "exceed ServerLimit of",
                        "exceeds ServerLimit value of",
                        "exceeds compile time limit of",
                        "exceeds compile-time limit of",
                        "not allowed, increasing to 1"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/httpd/error_log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/httpd/error_log",
                    "pattern": [
                        "(28)No space left on device: ",
                        "AH00485: scoreboard is full, not at MaxRequestWorkers",
                        "Require ServerLimit > 0, setting to 1",
                        "Resource temporarily unavailable",
                        "and would exceed the ServerLimit value of ",
                        "consider raising the MaxClients setting",
                        "consider raising the MaxRequestWorkers setting",
                        "exceed ServerLimit of",
                        "exceeds ServerLimit value of",
                        "exceeds compile time limit of",
                        "exceeds compile-time limit of",
                        "not allowed, increasing to 1"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/httpd/error_log",
                    "file": "/var/log/httpd/error_log",
                    "pattern": [
                        "(28)No space left on device: ",
                        "AH00485: scoreboard is full, not at MaxRequestWorkers",
                        "Require ServerLimit > 0, setting to 1",
                        "Resource temporarily unavailable",
                        "and would exceed the ServerLimit value of ",
                        "consider raising the MaxClients setting",
                        "consider raising the MaxRequestWorkers setting",
                        "exceed ServerLimit of",
                        "exceeds ServerLimit value of",
                        "exceeds compile time limit of",
                        "exceeds compile-time limit of",
                        "not allowed, increasing to 1"
                    ]
                }
            ]
        },
        "httpd_event_V": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/httpd.event_-V",
                    "command": "/usr/sbin/httpd.event -V",
                    "pattern": []
                }
            ]
        },
        "httpd_worker_V": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/httpd.worker_-V",
                    "command": "/usr/sbin/httpd.worker -V",
                    "pattern": []
                }
            ]
        },
        "ifcfg": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/network-scripts/()*ifcfg-.*",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/network-scripts/()*ifcfg-.*",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/sysconfig/network-scripts/()*ifcfg-.*",
                    "pattern": []
                }
            ]
        },
        "imagemagick_policy": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ImageMagick/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib64/ImageMagick-6.5.4/config/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/ImageMagick-6.5.4/config/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ImageMagick/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib64/ImageMagick-6.5.4/config/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/ImageMagick-6.5.4/config/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/ImageMagick/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/usr/lib64/ImageMagick-6.5.4/config/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/usr/lib/ImageMagick-6.5.4/config/()*policy\\.xml",
                    "pattern": [
                        "</policymap>",
                        "<policy",
                        "<policymap>"
                    ]
                }
            ]
        },
        "installed-rpms": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/rpm_-qa_--qf_NAME_-_VERSION_-_RELEASE_._ARCH_INSTALLTIME_date_BUILDTIME_VENDOR_BUILDHOST_DUMMY_SIGPGP_pgpsig",
                    "command": "/bin/rpm --root={CONTAINER_MOUNT_POINT} -qa '--qf=%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH}\t%{INSTALLTIME:date}\t%{BUILDTIME}\t%{VENDOR}\t%{BUILDHOST}\tDUMMY\t%{SIGPGP:pgpsig}\n'",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/rpm_-qa_--qf_NAME_-_VERSION_-_RELEASE_._ARCH_INSTALLTIME_date_BUILDTIME_VENDOR_BUILDHOST_DUMMY_SIGPGP_pgpsig",
                    "command": "/bin/rpm --root={CONTAINER_MOUNT_POINT} -qa '--qf=%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH}\t%{INSTALLTIME:date}\t%{BUILDTIME}\t%{VENDOR}\t%{BUILDHOST}\tDUMMY\t%{SIGPGP:pgpsig}\n'",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/rpm_-qa_--qf_NAME_-_VERSION_-_RELEASE_._ARCH_INSTALLTIME_date_BUILDTIME_VENDOR_BUILDHOST_DUMMY_SIGPGP_pgpsig",
                    "command": "/bin/rpm -qa --qf='%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH}\t%{INSTALLTIME:date}\t%{BUILDTIME}\t%{VENDOR}\t%{BUILDHOST}\tDUMMY\t%{SIGPGP:pgpsig}\n'",
                    "pattern": []
                }
            ]
        },
        "interrupts": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/interrupts",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/interrupts",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/interrupts",
                    "file": "/proc/interrupts",
                    "pattern": []
                }
            ]
        },
        "ip-s_link": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ip_-s_link",
                    "command": "/sbin/ip -s link",
                    "pattern": []
                }
            ]
        },
        "ip6tables": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ip6tables-save",
                    "command": "/sbin/ip6tables-save",
                    "pattern": []
                }
            ]
        },
        "ip_addr": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ip_addr",
                    "command": "/sbin/ip addr",
                    "pattern": []
                }
            ]
        },
        "ip_route_show_table_all": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ip_route_show_table_all",
                    "command": "/sbin/ip route show table all",
                    "pattern": []
                }
            ]
        },
        "ipaupgrade_log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/ipaupgrade.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/ipaupgrade.log",
                    "pattern": [
                        "wait_for_open_ports: localhost"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/ipaupgrade.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/ipaupgrade.log",
                    "pattern": [
                        "wait_for_open_ports: localhost"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/ipaupgrade.log",
                    "file": "/var/log/ipaupgrade.log",
                    "pattern": [
                        "wait_for_open_ports: localhost"
                    ]
                }
            ]
        },
        "ipcs_s": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ipcs_-s",
                    "command": "/usr/bin/ipcs -s",
                    "pattern": []
                }
            ]
        },
        "iptables": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/iptables-save",
                    "command": "/sbin/iptables-save",
                    "pattern": []
                }
            ]
        },
        "iptables_permanent": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/iptables",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/iptables",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/iptables",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/iptables",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/iptables",
                    "file": "/etc/sysconfig/iptables",
                    "pattern": []
                }
            ]
        },
        "ipv4_neigh": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ip_-4_neighbor_show_nud_all",
                    "command": "/sbin/ip -4 neighbor show nud all",
                    "pattern": []
                }
            ]
        },
        "ipv6_neigh": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ip_-6_neighbor_show_nud_all",
                    "command": "/sbin/ip -6 neighbor show nud all",
                    "pattern": []
                }
            ]
        },
        "iscsiadm_m_session": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/iscsiadm_-m_session",
                    "command": "/usr/sbin/iscsiadm -m session",
                    "pattern": []
                }
            ]
        },
        "kdump.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/kdump.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/kdump.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/kdump.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/kdump.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/kdump.conf",
                    "file": "/etc/kdump.conf",
                    "pattern": []
                }
            ]
        },
        "kexec_crash_size": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/kernel/kexec_crash_size",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/kernel/kexec_crash_size",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/kernel/kexec_crash_size",
                    "file": "/sys/kernel/kexec_crash_size",
                    "pattern": []
                }
            ]
        },
        "keystone_crontab": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/crontab_-l_-u_keystone",
                    "command": "/usr/bin/crontab -l -u keystone",
                    "pattern": [
                        "heat-manage",
                        "keystone-manage"
                    ]
                }
            ]
        },
        "krb5": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*krb5\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*krb5\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/()*krb5\\.conf",
                    "pattern": []
                }
            ]
        },
        "krb5.conf.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/krb5.conf.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/krb5.conf.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/krb5.conf.d/()*.*\\.conf",
                    "pattern": []
                }
            ]
        },
        "ksmstate": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/kernel/mm/ksm/run",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/kernel/mm/ksm/run",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/kernel/mm/ksm/run",
                    "file": "/sys/kernel/mm/ksm/run",
                    "pattern": []
                }
            ]
        },
        "libkeyutils": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/find_-L_.lib_.lib64_-name_libkeyutils.so",
                    "command": "/usr/bin/find -L {CONTAINER_MOUNT_POINT}/lib {CONTAINER_MOUNT_POINT}/lib64 -name libkeyutils.so*",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/find_-L_.lib_.lib64_-name_libkeyutils.so",
                    "command": "/usr/bin/find -L {CONTAINER_MOUNT_POINT}/lib {CONTAINER_MOUNT_POINT}/lib64 -name libkeyutils.so*",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/find_-L_.lib_.lib64_-name_libkeyutils.so",
                    "command": "/usr/bin/find -L /lib /lib64 -name 'libkeyutils.so*'",
                    "pattern": []
                }
            ]
        },
        "libkeyutils_objdumps": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/find_-L_.lib_.lib64_-name_libkeyutils.so.1_-exec_objdump_-x",
                    "command": "/usr/bin/find -L {CONTAINER_MOUNT_POINT}/lib {CONTAINER_MOUNT_POINT}/lib64 -name libkeyutils.so.1 -exec objdump -x {} ;",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/find_-L_.lib_.lib64_-name_libkeyutils.so.1_-exec_objdump_-x",
                    "command": "/usr/bin/find -L {CONTAINER_MOUNT_POINT}/lib {CONTAINER_MOUNT_POINT}/lib64 -name libkeyutils.so.1 -exec objdump -x {} ;",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/find_-L_.lib_.lib64_-name_libkeyutils.so.1_-exec_objdump_-x",
                    "command": "/usr/bin/find -L /lib /lib64 -name libkeyutils.so.1 -exec objdump -x \"{}\" \\;",
                    "pattern": []
                }
            ]
        },
        "limits.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/security/()*limits\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/security/()*limits\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/security/()*limits\\.conf",
                    "pattern": []
                }
            ]
        },
        "limits.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/security/limits.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/security/limits.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/security/limits.d/()*.*\\.conf",
                    "pattern": []
                }
            ]
        },
        "localtime": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/file_-L_.etc.localtime",
                    "command": "/usr/bin/file -L /etc/localtime",
                    "pattern": []
                }
            ]
        },
        "lpstat_p": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/lpstat_-p",
                    "command": "/usr/bin/lpstat -p",
                    "pattern": []
                }
            ]
        },
        "ls_boot": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-lanR_.boot",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/boot",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-lanR_.boot",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/boot",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-lanR_.boot",
                    "command": "/bin/ls -lanR /boot",
                    "pattern": []
                }
            ]
        },
        "ls_dev": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-lanR_.dev",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/dev",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-lanR_.dev",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/dev",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-lanR_.dev",
                    "command": "/bin/ls -lanR /dev",
                    "pattern": []
                }
            ]
        },
        "ls_disk": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-lanR_.dev.disk",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/dev/disk",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-lanR_.dev.disk",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/dev/disk",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-lanR_.dev.disk",
                    "command": "/bin/ls -lanR /dev/disk",
                    "pattern": []
                }
            ]
        },
        "ls_docker_volumes": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-lanR_.var.lib.docker.volumes",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/var/lib/docker/volumes",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-lanR_.var.lib.docker.volumes",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/var/lib/docker/volumes",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-lanR_.var.lib.docker.volumes",
                    "command": "/bin/ls -lanR /var/lib/docker/volumes",
                    "pattern": []
                }
            ]
        },
        "ls_etc": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-lanR_.etc",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/etc",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-lanR_.etc",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/etc",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-lanR_.etc",
                    "command": "/bin/ls -lanR /etc",
                    "pattern": []
                }
            ]
        },
        "ls_sys_firmware": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-lanR_.sys.firmware",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/sys/firmware",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-lanR_.sys.firmware",
                    "command": "/bin/ls -lanR {CONTAINER_MOUNT_POINT}/sys/firmware",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-lanR_.sys.firmware",
                    "command": "/bin/ls -lanR /sys/firmware",
                    "pattern": []
                }
            ]
        },
        "ls_var_log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-la_.var.log_.var.log.audit",
                    "command": "/bin/ls -la {CONTAINER_MOUNT_POINT}/var/log {CONTAINER_MOUNT_POINT}/var/log/audit",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-la_.var.log_.var.log.audit",
                    "command": "/bin/ls -la {CONTAINER_MOUNT_POINT}/var/log {CONTAINER_MOUNT_POINT}/var/log/audit",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-la_.var.log_.var.log.audit",
                    "command": "/bin/ls -la /var/log /var/log/audit",
                    "pattern": []
                }
            ]
        },
        "ls_var_www": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-la_.dev.null_.var.www",
                    "command": "/bin/ls -la {CONTAINER_MOUNT_POINT}/dev/null {CONTAINER_MOUNT_POINT}/var/www",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-la_.dev.null_.var.www",
                    "command": "/bin/ls -la {CONTAINER_MOUNT_POINT}/dev/null {CONTAINER_MOUNT_POINT}/var/www",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-la_.dev.null_.var.www",
                    "command": "/bin/ls -la /dev/null /var/www",
                    "pattern": []
                }
            ]
        },
        "lsblk": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/lsblk",
                    "command": "/bin/lsblk",
                    "pattern": []
                }
            ]
        },
        "lsblk_pairs": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/lsblk_-P_-o_NAME_KNAME_MAJ_MIN_FSTYPE_MOUNTPOINT_LABEL_UUID_RA_RO_RM_MODEL_SIZE_STATE_OWNER_GROUP_MODE_ALIGNMENT_MIN-IO_OPT-IO_PHY-SEC_LOG-SEC_ROTA_SCHED_RQ-SIZE_TYPE_DISC-ALN_DISC-GRAN_DISC-MAX_DISC-ZERO",
                    "command": "/bin/lsblk -P -o NAME,KNAME,MAJ:MIN,FSTYPE,MOUNTPOINT,LABEL,UUID,RA,RO,RM,MODEL,SIZE,STATE,OWNER,GROUP,MODE,ALIGNMENT,MIN-IO,OPT-IO,PHY-SEC,LOG-SEC,ROTA,SCHED,RQ-SIZE,TYPE,DISC-ALN,DISC-GRAN,DISC-MAX,DISC-ZERO",
                    "pattern": []
                }
            ]
        },
        "lsmod": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/lsmod",
                    "command": "/sbin/lsmod",
                    "pattern": []
                }
            ]
        },
        "lsof": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/lsof",
                    "command": "/usr/sbin/lsof",
                    "pattern": [
                        "COMMAND",
                        "libcrypto",
                        "libssl",
                        "libssl.so",
                        "lsnrctl",
                        "oracle",
                        "tnslsnr"
                    ]
                }
            ]
        },
        "lspci": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/lspci",
                    "command": "/sbin/lspci",
                    "pattern": []
                }
            ]
        },
        "lssap": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/usr.sap.hostctrl.exe.lssap",
                    "command": "/usr/sap/hostctrl/exe/lssap",
                    "pattern": []
                }
            ]
        },
        "lvm.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/lvm/lvm.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/lvm/lvm.conf",
                    "pattern": [
                        "auto_activation_volume_list",
                        "filter",
                        "locking_type",
                        "volume_list"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/lvm/lvm.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/lvm/lvm.conf",
                    "pattern": [
                        "auto_activation_volume_list",
                        "filter",
                        "locking_type",
                        "volume_list"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/lvm/lvm.conf",
                    "file": "/etc/lvm/lvm.conf",
                    "pattern": [
                        "auto_activation_volume_list",
                        "filter",
                        "locking_type",
                        "volume_list"
                    ]
                }
            ]
        },
        "lvs_noheadings": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/lvs_--nameprefixes_--noheadings_--separator_-a_-o_lv_name_lv_size_lv_attr_mirror_log_vg_name_devices_region_size_data_percent_metadata_percent_--config_global_locking_type_0",
                    "command": "/sbin/lvs --nameprefixes --noheadings --separator='|' -a -o lv_name,lv_size,lv_attr,mirror_log,vg_name,devices,region_size,data_percent,metadata_percent --config=\"global{locking_type=0}\"",
                    "pattern": []
                }
            ]
        },
        "machine-id1": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/redhat-access-insights/machine-id",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/redhat-access-insights/machine-id",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/redhat-access-insights/machine-id",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/redhat-access-insights/machine-id",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/redhat-access-insights/machine-id",
                    "file": "/etc/redhat-access-insights/machine-id",
                    "pattern": []
                }
            ]
        },
        "machine-id2": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/redhat_access_proactive/machine-id",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/redhat_access_proactive/machine-id",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/redhat_access_proactive/machine-id",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/redhat_access_proactive/machine-id",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/redhat_access_proactive/machine-id",
                    "file": "/etc/redhat_access_proactive/machine-id",
                    "pattern": []
                }
            ]
        },
        "mariadb.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/mariadb/mariadb.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/mariadb/mariadb.log",
                    "pattern": [
                        "Too many open files",
                        "[ERROR]"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/mariadb/mariadb.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/mariadb/mariadb.log",
                    "pattern": [
                        "Too many open files",
                        "[ERROR]"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/mariadb/mariadb.log",
                    "file": "/var/log/mariadb/mariadb.log",
                    "pattern": [
                        "Too many open files",
                        "[ERROR]"
                    ]
                }
            ]
        },
        "mdstat": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/mdstat",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/mdstat",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/mdstat",
                    "file": "/proc/mdstat",
                    "pattern": []
                }
            ]
        },
        "meminfo": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/meminfo",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/meminfo",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/meminfo",
                    "file": "/proc/meminfo",
                    "pattern": []
                }
            ]
        },
        "messages": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/messages",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/messages",
                    "pattern": [
                        " disconnect jid=",
                        ": segfault at ",
                        ": session replaced: jid=",
                        "Abort command issued",
                        "DMA Status error.  Resetting chip",
                        "Dazed and confused, but trying to continue",
                        "Device offlined - not ready after error recovery",
                        "Error deleting EBS Disk volume aws",
                        "Error running DeviceResume dm_task_run failed",
                        "Machine",
                        "Neighbour table overflow",
                        "Out of MCCQ wrbs",
                        "Out of memory: kill process",
                        "SCSI device reset on",
                        "SDN initialization failed: Error: Existing service with IP: None is not part of service network",
                        "SELinux is preventing /usr/sbin/logrotate from getattr access on the file",
                        "Sense Key : Illegal Request [current]",
                        "Temperature above threshold",
                        "Uhhuh. NMI received for unknown reason",
                        "Virtualization daemon",
                        "WRITE SAME failed. Manually zeroing",
                        "be2net",
                        "blocked FC remote port time out",
                        "does not seem to be present, delaying initialization",
                        "ext4_ext_search_left",
                        "fiid_obj_get: 'present_countdown_value': data not available",
                        "firewalld - dynamic firewall daemon",
                        "heated above trip temperature",
                        "in libnl.so.1",
                        "irq handler for vector (irq -1)",
                        "is beyond advertised capabilities",
                        "kernel: CIFS VFS: Unexpected SMB signature",
                        "kernel: bnx2fc: byte_count",
                        "kernel: lockd: Unknown symbol register_inet6addr_notifier",
                        "kernel: lockd: Unknown symbol unregister_inet6addr_notifier",
                        "kernel: megasas: Found FW in FAULT state,will reset adapter.",
                        "khash_super_prune_nolock",
                        "megaraid_sas: FW detected to be in faultstate, restarting it",
                        "mode:0x20",
                        "multipathd.service operation timed out. Terminating",
                        "nf_conntrack: expectation table full",
                        "nf_conntrack: table full, dropping packet",
                        "page allocation failure",
                        "per_source_limit from",
                        "server kernel: rhsmcertd-worke",
                        "skb_copy",
                        "skb_over_panic",
                        "start request repeated too quickly for docker.service",
                        "swapper: page allocation failure",
                        "tg3_start_xmit",
                        "timeout; kill it",
                        "udev: renamed network interface",
                        "udevd",
                        "vdsm-tool: EnvironmentError: Failed to restore the persisted networks"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/messages",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/messages",
                    "pattern": [
                        " disconnect jid=",
                        ": segfault at ",
                        ": session replaced: jid=",
                        "Abort command issued",
                        "DMA Status error.  Resetting chip",
                        "Dazed and confused, but trying to continue",
                        "Device offlined - not ready after error recovery",
                        "Error deleting EBS Disk volume aws",
                        "Error running DeviceResume dm_task_run failed",
                        "Machine",
                        "Neighbour table overflow",
                        "Out of MCCQ wrbs",
                        "Out of memory: kill process",
                        "SCSI device reset on",
                        "SDN initialization failed: Error: Existing service with IP: None is not part of service network",
                        "SELinux is preventing /usr/sbin/logrotate from getattr access on the file",
                        "Sense Key : Illegal Request [current]",
                        "Temperature above threshold",
                        "Uhhuh. NMI received for unknown reason",
                        "Virtualization daemon",
                        "WRITE SAME failed. Manually zeroing",
                        "be2net",
                        "blocked FC remote port time out",
                        "does not seem to be present, delaying initialization",
                        "ext4_ext_search_left",
                        "fiid_obj_get: 'present_countdown_value': data not available",
                        "firewalld - dynamic firewall daemon",
                        "heated above trip temperature",
                        "in libnl.so.1",
                        "irq handler for vector (irq -1)",
                        "is beyond advertised capabilities",
                        "kernel: CIFS VFS: Unexpected SMB signature",
                        "kernel: bnx2fc: byte_count",
                        "kernel: lockd: Unknown symbol register_inet6addr_notifier",
                        "kernel: lockd: Unknown symbol unregister_inet6addr_notifier",
                        "kernel: megasas: Found FW in FAULT state,will reset adapter.",
                        "khash_super_prune_nolock",
                        "megaraid_sas: FW detected to be in faultstate, restarting it",
                        "mode:0x20",
                        "multipathd.service operation timed out. Terminating",
                        "nf_conntrack: expectation table full",
                        "nf_conntrack: table full, dropping packet",
                        "page allocation failure",
                        "per_source_limit from",
                        "server kernel: rhsmcertd-worke",
                        "skb_copy",
                        "skb_over_panic",
                        "start request repeated too quickly for docker.service",
                        "swapper: page allocation failure",
                        "tg3_start_xmit",
                        "timeout; kill it",
                        "udev: renamed network interface",
                        "udevd",
                        "vdsm-tool: EnvironmentError: Failed to restore the persisted networks"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/messages",
                    "file": "/var/log/messages",
                    "pattern": [
                        " disconnect jid=",
                        ": segfault at ",
                        ": session replaced: jid=",
                        "Abort command issued",
                        "DMA Status error.  Resetting chip",
                        "Dazed and confused, but trying to continue",
                        "Device offlined - not ready after error recovery",
                        "Error deleting EBS Disk volume aws",
                        "Error running DeviceResume dm_task_run failed",
                        "Machine",
                        "Neighbour table overflow",
                        "Out of MCCQ wrbs",
                        "Out of memory: kill process",
                        "SCSI device reset on",
                        "SDN initialization failed: Error: Existing service with IP: None is not part of service network",
                        "SELinux is preventing /usr/sbin/logrotate from getattr access on the file",
                        "Sense Key : Illegal Request [current]",
                        "Temperature above threshold",
                        "Uhhuh. NMI received for unknown reason",
                        "Virtualization daemon",
                        "WRITE SAME failed. Manually zeroing",
                        "be2net",
                        "blocked FC remote port time out",
                        "does not seem to be present, delaying initialization",
                        "ext4_ext_search_left",
                        "fiid_obj_get: 'present_countdown_value': data not available",
                        "firewalld - dynamic firewall daemon",
                        "heated above trip temperature",
                        "in libnl.so.1",
                        "irq handler for vector (irq -1)",
                        "is beyond advertised capabilities",
                        "kernel: CIFS VFS: Unexpected SMB signature",
                        "kernel: bnx2fc: byte_count",
                        "kernel: lockd: Unknown symbol register_inet6addr_notifier",
                        "kernel: lockd: Unknown symbol unregister_inet6addr_notifier",
                        "kernel: megasas: Found FW in FAULT state,will reset adapter.",
                        "khash_super_prune_nolock",
                        "megaraid_sas: FW detected to be in faultstate, restarting it",
                        "mode:0x20",
                        "multipathd.service operation timed out. Terminating",
                        "nf_conntrack: expectation table full",
                        "nf_conntrack: table full, dropping packet",
                        "page allocation failure",
                        "per_source_limit from",
                        "server kernel: rhsmcertd-worke",
                        "skb_copy",
                        "skb_over_panic",
                        "start request repeated too quickly for docker.service",
                        "swapper: page allocation failure",
                        "tg3_start_xmit",
                        "timeout; kill it",
                        "udev: renamed network interface",
                        "udevd",
                        "vdsm-tool: EnvironmentError: Failed to restore the persisted networks"
                    ]
                }
            ]
        },
        "mlx4_port": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/find_.sys.bus.pci.devices._.mlx4_port_0-9_-print_-exec_cat",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/sys/bus/pci/devices/*/mlx4_port[0-9] -print -exec cat {} ;",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/find_.sys.bus.pci.devices._.mlx4_port_0-9_-print_-exec_cat",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/sys/bus/pci/devices/*/mlx4_port[0-9] -print -exec cat {} ;",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/find_.sys.bus.pci.devices._.mlx4_port_0-9_-print_-exec_cat",
                    "command": "/usr/bin/find /sys/bus/pci/devices/*/mlx4_port[0-9] -print -exec cat {} \\;",
                    "pattern": []
                }
            ]
        },
        "modprobe.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*modprobe\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*modprobe\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/()*modprobe\\.conf",
                    "pattern": []
                }
            ]
        },
        "modprobe.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/modprobe.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/modprobe.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/modprobe.d/()*.*\\.conf",
                    "pattern": []
                }
            ]
        },
        "mongod_conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*mongod.conf",
                    "pattern": [
                        "destination",
                        "syslog",
                        "systemLog"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*mongod.conf",
                    "pattern": [
                        "destination",
                        "syslog",
                        "systemLog"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/()*mongod.conf",
                    "pattern": [
                        "destination",
                        "syslog",
                        "systemLog"
                    ]
                }
            ]
        },
        "mount": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/mount",
                    "command": "/bin/mount",
                    "pattern": []
                }
            ]
        },
        "multicast_querier": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/find_.sys.devices.virtual.net._-name_multicast_querier_-print_-exec_cat",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/sys/devices/virtual/net/ -name multicast_querier -print -exec cat {} ;",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/find_.sys.devices.virtual.net._-name_multicast_querier_-print_-exec_cat",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/sys/devices/virtual/net/ -name multicast_querier -print -exec cat {} ;",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/find_.sys.devices.virtual.net._-name_multicast_querier_-print_-exec_cat",
                    "command": "/usr/bin/find /sys/devices/virtual/net/ -name multicast_querier -print -exec cat {} \\;",
                    "pattern": []
                }
            ]
        },
        "multipath.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/multipath.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/multipath.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/multipath.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/multipath.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/multipath.conf",
                    "file": "/etc/multipath.conf",
                    "pattern": []
                }
            ]
        },
        "multipath_-v4_-ll": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/multipath_-v4_-ll",
                    "command": "/sbin/multipath -v4 -ll",
                    "pattern": []
                }
            ]
        },
        "named-checkconf_p": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/named-checkconf_-p",
                    "command": "/usr/sbin/named-checkconf -p",
                    "pattern": [
                        "DNSSEC-ENABLE",
                        "Dnssec-Enable",
                        "dnssec-enable"
                    ]
                }
            ]
        },
        "netconsole": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/netconsole",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/netconsole",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/netconsole",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/netconsole",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/netconsole",
                    "file": "/etc/sysconfig/netconsole",
                    "pattern": []
                }
            ]
        },
        "netstat": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/netstat_-neopa",
                    "command": "/bin/netstat -neopa",
                    "pattern": []
                }
            ]
        },
        "netstat-i": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/netstat_-i",
                    "command": "/bin/netstat -i",
                    "pattern": []
                }
            ]
        },
        "netstat-s": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/netstat_-s",
                    "command": "/bin/netstat -s",
                    "pattern": []
                }
            ]
        },
        "netstat_-agn": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/netstat_-agn",
                    "command": "/bin/netstat -agn",
                    "pattern": []
                }
            ]
        },
        "nfnetlink_queue": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/net/netfilter/nfnetlink_queue",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/net/netfilter/nfnetlink_queue",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/net/netfilter/nfnetlink_queue",
                    "file": "/proc/net/netfilter/nfnetlink_queue",
                    "pattern": []
                }
            ]
        },
        "nfs_exports": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/exports",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/exports",
                    "pattern": [
                        "no_root_squash"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/exports",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/exports",
                    "pattern": [
                        "no_root_squash"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/exports",
                    "file": "/etc/exports",
                    "pattern": [
                        "no_root_squash"
                    ]
                }
            ]
        },
        "nfs_exports.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/exports.d/()*.*\\.exports",
                    "pattern": [
                        "no_root_squash"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/exports.d/()*.*\\.exports",
                    "pattern": [
                        "no_root_squash"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/exports.d/()*.*\\.exports",
                    "pattern": [
                        "no_root_squash"
                    ]
                }
            ]
        },
        "nginx_conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-nginx112/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/opt/rh/nginx14/root/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/opt/rh/nginx16/root/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-nginx110/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-nginx18/nginx/()*nginx.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-nginx112/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/opt/rh/nginx14/root/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/opt/rh/nginx16/root/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-nginx110/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-nginx18/nginx/()*nginx.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/opt/rh/rh-nginx112/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/opt/rh/nginx14/root/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/opt/rh/nginx16/root/etc/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/opt/rh/rh-nginx110/nginx/()*nginx.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/opt/rh/rh-nginx18/nginx/()*nginx.conf",
                    "pattern": []
                }
            ]
        },
        "nova-api_log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/nova/nova-api.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/nova/nova-api.log",
                    "pattern": [
                        "Timed out waiting for a reply to message ID"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/nova/nova-api.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/nova/nova-api.log",
                    "pattern": [
                        "Timed out waiting for a reply to message ID"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/nova/nova-api.log",
                    "file": "/var/log/nova/nova-api.log",
                    "pattern": [
                        "Timed out waiting for a reply to message ID"
                    ]
                }
            ]
        },
        "nova-compute.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/nova/nova-compute.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/nova/nova-compute.log",
                    "pattern": [
                        "Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+ssh",
                        "unsupported configuration: Unable to find security driver for model selinux"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/nova/nova-compute.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/nova/nova-compute.log",
                    "pattern": [
                        "Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+ssh",
                        "unsupported configuration: Unable to find security driver for model selinux"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/nova/nova-compute.log",
                    "file": "/var/log/nova/nova-compute.log",
                    "pattern": [
                        "Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+ssh",
                        "unsupported configuration: Unable to find security driver for model selinux"
                    ]
                }
            ]
        },
        "nova.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/nova/nova.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nova/nova.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/nova/nova.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nova/nova.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/nova/nova.conf",
                    "file": "/etc/nova/nova.conf",
                    "pattern": []
                }
            ]
        },
        "nova_crontab": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/crontab_-l_-u_nova",
                    "command": "/usr/bin/crontab -l -u nova",
                    "pattern": []
                }
            ]
        },
        "nscd.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/nscd.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nscd.conf",
                    "pattern": [
                        "enable-cache"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/nscd.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nscd.conf",
                    "pattern": [
                        "enable-cache"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/nscd.conf",
                    "file": "/etc/nscd.conf",
                    "pattern": [
                        "enable-cache"
                    ]
                }
            ]
        },
        "nsswitch.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/nsswitch.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nsswitch.conf",
                    "pattern": [
                        "HOSTS:",
                        "Hosts:",
                        "hosts:"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/nsswitch.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/nsswitch.conf",
                    "pattern": [
                        "HOSTS:",
                        "Hosts:",
                        "hosts:"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/nsswitch.conf",
                    "file": "/etc/nsswitch.conf",
                    "pattern": [
                        "HOSTS:",
                        "Hosts:",
                        "hosts:"
                    ]
                }
            ]
        },
        "ntp.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/ntp.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ntp.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/ntp.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ntp.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/ntp.conf",
                    "file": "/etc/ntp.conf",
                    "pattern": []
                }
            ]
        },
        "ntpq_leap": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ntpq_-c_rv_0_leap",
                    "command": "/usr/sbin/ntpq -c 'rv 0 leap'",
                    "pattern": []
                }
            ]
        },
        "ntpq_pn": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ntpq_-pn",
                    "command": "/usr/sbin/ntpq -pn",
                    "pattern": []
                }
            ]
        },
        "ntptime": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ntptime",
                    "command": "/usr/sbin/ntptime",
                    "pattern": []
                }
            ]
        },
        "numeric_user_group_name": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/grep_-c_digit_.etc.passwd_.etc.group",
                    "command": "/bin/grep -c '^[[:digit:]]' /etc/passwd /etc/group",
                    "pattern": []
                }
            ]
        },
        "oc_get_bc": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_bc_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get bc -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_dc": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_dc_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get dc -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_node": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_nodes_-o_yaml",
                    "command": "/usr/bin/oc get nodes -o yaml",
                    "pattern": []
                }
            ]
        },
        "oc_get_pod": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_pod_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get pod -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_project": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_project_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get project -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_pv": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_pv_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get pv -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_rc": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_rc_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get rc -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_role": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_role_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get role -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_rolebinding": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_rolebinding_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get rolebinding -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "oc_get_service": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/oc_get_service_-o_yaml_--all-namespaces",
                    "command": "/usr/bin/oc get service -o yaml --all-namespaces",
                    "pattern": []
                }
            ]
        },
        "openvswitch_other_config": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ovs-vsctl_-t_5_get_Open_vSwitch_._other_config",
                    "command": "/usr/bin/ovs-vsctl -t 5 get Open_vSwitch . other_config",
                    "pattern": []
                }
            ]
        },
        "ose_master_config": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/origin/master/master-config.yaml",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/origin/master/master-config.yaml",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/origin/master/master-config.yaml",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/origin/master/master-config.yaml",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/origin/master/master-config.yaml",
                    "file": "/etc/origin/master/master-config.yaml",
                    "pattern": []
                }
            ]
        },
        "ose_node_config": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/origin/node/node-config.yaml",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/origin/node/node-config.yaml",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/origin/node/node-config.yaml",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/origin/node/node-config.yaml",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/origin/node/node-config.yaml",
                    "file": "/etc/origin/node/node-config.yaml",
                    "pattern": []
                }
            ]
        },
        "ovs-vsctl_show": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ovs-vsctl_show",
                    "command": "/usr/bin/ovs-vsctl show",
                    "pattern": []
                }
            ]
        },
        "pacemaker.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/pacemaker.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/pacemaker.log",
                    "pattern": [
                        "pcmk_dbus_find_error"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/pacemaker.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/pacemaker.log",
                    "pattern": [
                        "pcmk_dbus_find_error"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/pacemaker.log",
                    "file": "/var/log/pacemaker.log",
                    "pattern": [
                        "pcmk_dbus_find_error"
                    ]
                }
            ]
        },
        "password-auth": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/pam.d/password-auth",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/pam.d/password-auth",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/pam.d/password-auth",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/pam.d/password-auth",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/pam.d/password-auth",
                    "file": "/etc/pam.d/password-auth",
                    "pattern": []
                }
            ]
        },
        "pluginconf.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/yum/pluginconf.d/()*\\w+\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/yum/pluginconf.d/()*\\w+\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/yum/pluginconf.d/()*\\w+\\.conf",
                    "pattern": []
                }
            ]
        },
        "postgresql.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/lib/pgsql/data/postgresql.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/var/lib/pgsql/data/postgresql.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/lib/pgsql/data/postgresql.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/var/lib/pgsql/data/postgresql.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/lib/pgsql/data/postgresql.conf",
                    "file": "/var/lib/pgsql/data/postgresql.conf",
                    "pattern": []
                }
            ]
        },
        "postgresql.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/lib/pgsql/data/pg_log/()*postgresql-.+\\.log",
                    "pattern": [
                        "ERROR:",
                        "FATAL",
                        "checkpoints are occurring too frequently",
                        "connection limit exceeded for non-superusers",
                        "remaining connection slots are reserved for non-replication superuser connections"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/var/lib/pgsql/data/pg_log/()*postgresql-.+\\.log",
                    "pattern": [
                        "ERROR:",
                        "FATAL",
                        "checkpoints are occurring too frequently",
                        "connection limit exceeded for non-superusers",
                        "remaining connection slots are reserved for non-replication superuser connections"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/var/lib/pgsql/data/pg_log/()*postgresql-.+\\.log",
                    "pattern": [
                        "ERROR:",
                        "FATAL",
                        "checkpoints are occurring too frequently",
                        "connection limit exceeded for non-superusers",
                        "remaining connection slots are reserved for non-replication superuser connections"
                    ]
                }
            ]
        },
        "proc_snmp_ipv4": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/net/snmp",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/net/snmp",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/net/snmp",
                    "file": "/proc/net/snmp",
                    "pattern": []
                }
            ]
        },
        "proc_snmp_ipv6": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/net/snmp6",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/net/snmp6",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/net/snmp6",
                    "file": "/proc/net/snmp6",
                    "pattern": []
                }
            ]
        },
        "ps_aux": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ps_aux",
                    "command": "/bin/ps aux",
                    "pattern": [
                        "/usr/bin/docker",
                        "/usr/bin/docker daemon",
                        "/usr/bin/docker-current",
                        "/usr/bin/docker-current daemon",
                        "/usr/bin/dockerd-current",
                        "/usr/bin/openshift start master",
                        "/usr/bin/openshift start node",
                        "COMMAND",
                        "STAP",
                        "STAP/8.2",
                        "catalina.base",
                        "ceph-osd",
                        "chronyd",
                        "java",
                        "keystone-all",
                        "ntpd",
                        "phc2sys",
                        "ptp4l",
                        "tomcat"
                    ]
                }
            ]
        },
        "ps_auxcww": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ps_auxcww",
                    "command": "/bin/ps auxcww",
                    "pattern": []
                }
            ]
        },
        "ps_auxww": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ps_auxww",
                    "command": "/bin/ps auxww",
                    "pattern": []
                }
            ]
        },
        "ps_auxwww": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sos_commands/process/ps_auxwww",
                    "file": "{CONTAINER_MOUNT_POINT}/sos_commands/process/ps_auxwww",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/sos_commands/process/ps_auxwww",
                    "file": "{CONTAINER_MOUNT_POINT}/sos_commands/process/ps_auxwww",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sos_commands/process/ps_auxwww",
                    "file": "/sos_commands/process/ps_auxwww",
                    "pattern": []
                }
            ]
        },
        "pvs_noheadings": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/pvs_--nameprefixes_--noheadings_--separator_-a_-o_pv_all_vg_name_--config_global_locking_type_0",
                    "command": "/sbin/pvs --nameprefixes --noheadings --separator='|' -a -o pv_all,vg_name --config=\"global{locking_type=0}\"",
                    "pattern": []
                }
            ]
        },
        "qemu.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/libvirt/qemu.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/libvirt/qemu.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/libvirt/qemu.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/libvirt/qemu.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/libvirt/qemu.conf",
                    "file": "/etc/libvirt/qemu.conf",
                    "pattern": []
                }
            ]
        },
        "rabbitmq_queues": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/rabbitmqctl_list_queues_name_messages_consumers_auto_delete",
                    "command": "/usr/sbin/rabbitmqctl list_queues name messages consumers auto_delete",
                    "pattern": []
                }
            ]
        },
        "rabbitmq_report": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/rabbitmqctl_report",
                    "command": "/usr/sbin/rabbitmqctl report",
                    "pattern": []
                }
            ]
        },
        "rabbitmq_startup_log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/rabbitmq/startup_log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rabbitmq/startup_log",
                    "pattern": [
                        "Event crashed log handler:"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/rabbitmq/startup_log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rabbitmq/startup_log",
                    "pattern": [
                        "Event crashed log handler:"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/rabbitmq/startup_log",
                    "file": "/var/log/rabbitmq/startup_log",
                    "pattern": [
                        "Event crashed log handler:"
                    ]
                }
            ]
        },
        "rabbitmq_users": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/rabbitmqctl_list_users",
                    "command": "/usr/sbin/rabbitmqctl list_users",
                    "pattern": []
                }
            ]
        },
        "rc.local": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/rc.d/rc.local",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rc.d/rc.local",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/rc.d/rc.local",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rc.d/rc.local",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/rc.d/rc.local",
                    "file": "/etc/rc.d/rc.local",
                    "pattern": []
                }
            ]
        },
        "redhat-release": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/redhat-release",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/redhat-release",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/redhat-release",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/redhat-release",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/redhat-release",
                    "file": "/etc/redhat-release",
                    "pattern": []
                }
            ]
        },
        "resolv.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/resolv.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/resolv.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/resolv.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/resolv.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/resolv.conf",
                    "file": "/etc/resolv.conf",
                    "pattern": []
                }
            ]
        },
        "rh_mongodb26_conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-mongodb26/()*mongod.conf",
                    "pattern": [
                        "destination",
                        "syslog",
                        "systemLog"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-mongodb26/()*mongod.conf",
                    "pattern": [
                        "destination",
                        "syslog",
                        "systemLog"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/opt/rh/rh-mongodb26/()*mongod.conf",
                    "pattern": [
                        "destination",
                        "syslog",
                        "systemLog"
                    ]
                }
            ]
        },
        "rhn-entitlement-cert.xml": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/rhn/()*rhn-entitlement-cert\\.xml.*",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/rhn/()*rhn-entitlement-cert\\.xml.*",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/sysconfig/rhn/()*rhn-entitlement-cert\\.xml.*",
                    "pattern": []
                }
            ]
        },
        "rhn-schema-version": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/rhn-schema-version",
                    "command": "/usr/bin/rhn-schema-version",
                    "pattern": []
                }
            ]
        },
        "rhn.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/rhn/rhn.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rhn/rhn.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/rhn/rhn.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rhn/rhn.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/rhn/rhn.conf",
                    "file": "/etc/rhn/rhn.conf",
                    "pattern": []
                }
            ]
        },
        "rhn_hibernate.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/usr/share/rhn/config-defaults/rhn_hibernate.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/share/rhn/config-defaults/rhn_hibernate.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/usr/share/rhn/config-defaults/rhn_hibernate.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/share/rhn/config-defaults/rhn_hibernate.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/usr/share/rhn/config-defaults/rhn_hibernate.conf",
                    "file": "/usr/share/rhn/config-defaults/rhn_hibernate.conf",
                    "pattern": []
                }
            ]
        },
        "rhn_search_daemon.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/rhn/search/rhn_search_daemon.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rhn/search/rhn_search_daemon.log",
                    "pattern": [
                        "APPARENT DEADLOCK!"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/rhn/search/rhn_search_daemon.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rhn/search/rhn_search_daemon.log",
                    "pattern": [
                        "APPARENT DEADLOCK!"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/rhn/search/rhn_search_daemon.log",
                    "file": "/var/log/rhn/search/rhn_search_daemon.log",
                    "pattern": [
                        "APPARENT DEADLOCK!"
                    ]
                }
            ]
        },
        "rhn_taskomatic_daemon.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/rhn/rhn_taskomatic_daemon.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rhn/rhn_taskomatic_daemon.log",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/rhn/rhn_taskomatic_daemon.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rhn/rhn_taskomatic_daemon.log",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/rhn/rhn_taskomatic_daemon.log",
                    "file": "/var/log/rhn/rhn_taskomatic_daemon.log",
                    "pattern": []
                }
            ]
        },
        "rhsm.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/rhsm/rhsm.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rhsm/rhsm.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/rhsm/rhsm.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rhsm/rhsm.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/rhsm/rhsm.conf",
                    "file": "/etc/rhsm/rhsm.conf",
                    "pattern": []
                }
            ]
        },
        "rhsm.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/rhsm/rhsm.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rhsm/rhsm.log",
                    "pattern": [
                        "Temporary failure in name resolution",
                        "Validation failed: Name is invalid"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/rhsm/rhsm.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/rhsm/rhsm.log",
                    "pattern": [
                        "Temporary failure in name resolution",
                        "Validation failed: Name is invalid"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/rhsm/rhsm.log",
                    "file": "/var/log/rhsm/rhsm.log",
                    "pattern": [
                        "Temporary failure in name resolution",
                        "Validation failed: Name is invalid"
                    ]
                }
            ]
        },
        "root_crontab": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/crontab_-l_-u_root",
                    "command": "/usr/bin/crontab -l -u root",
                    "pattern": [
                        "heat-manage"
                    ]
                }
            ]
        },
        "rpm_-V_packages": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/rpm_-V_coreutils_procps_procps-ng_shadow-utils_passwd_sudo",
                    "command": "/bin/rpm --root={CONTAINER_MOUNT_POINT} -V coreutils procps procps-ng shadow-utils passwd sudo",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/rpm_-V_coreutils_procps_procps-ng_shadow-utils_passwd_sudo",
                    "command": "/bin/rpm --root={CONTAINER_MOUNT_POINT} -V coreutils procps procps-ng shadow-utils passwd sudo",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/rpm_-V_coreutils_procps_procps-ng_shadow-utils_passwd_sudo",
                    "command": "/bin/rpm -V coreutils procps procps-ng shadow-utils passwd sudo",
                    "pattern": []
                }
            ]
        },
        "rsyslog.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/rsyslog.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rsyslog.conf",
                    "pattern": [
                        "imtcp",
                        "regex"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/rsyslog.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/rsyslog.conf",
                    "pattern": [
                        "imtcp",
                        "regex"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/rsyslog.conf",
                    "file": "/etc/rsyslog.conf",
                    "pattern": [
                        "imtcp",
                        "regex"
                    ]
                }
            ]
        },
        "samba": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/samba/smb.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/samba/smb.conf",
                    "pattern": [
                        "GLOBAL",
                        "Global",
                        "KERBEROS METHOD",
                        "Kerberos Method",
                        "MAX SMBD PROCESSES",
                        "Max Smbd Processes",
                        "NT PIPE SUPPORT",
                        "Nt Pipe Support",
                        "REALM",
                        "Realm",
                        "SECURITY",
                        "Security",
                        "[",
                        "global",
                        "kerberos method",
                        "max smbd processes",
                        "nt pipe support",
                        "realm",
                        "security"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/samba/smb.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/samba/smb.conf",
                    "pattern": [
                        "GLOBAL",
                        "Global",
                        "KERBEROS METHOD",
                        "Kerberos Method",
                        "MAX SMBD PROCESSES",
                        "Max Smbd Processes",
                        "NT PIPE SUPPORT",
                        "Nt Pipe Support",
                        "REALM",
                        "Realm",
                        "SECURITY",
                        "Security",
                        "[",
                        "global",
                        "kerberos method",
                        "max smbd processes",
                        "nt pipe support",
                        "realm",
                        "security"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/samba/smb.conf",
                    "file": "/etc/samba/smb.conf",
                    "pattern": [
                        "GLOBAL",
                        "Global",
                        "KERBEROS METHOD",
                        "Kerberos Method",
                        "MAX SMBD PROCESSES",
                        "Max Smbd Processes",
                        "NT PIPE SUPPORT",
                        "Nt Pipe Support",
                        "REALM",
                        "Realm",
                        "SECURITY",
                        "Security",
                        "[",
                        "global",
                        "kerberos method",
                        "max smbd processes",
                        "nt pipe support",
                        "realm",
                        "security"
                    ]
                }
            ]
        },
        "satellite_version.rb": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/usr/share/foreman/lib/satellite/version.rb",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/share/foreman/lib/satellite/version.rb",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/usr/share/foreman/lib/satellite/version.rb",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/share/foreman/lib/satellite/version.rb",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/usr/share/foreman/lib/satellite/version.rb",
                    "file": "/usr/share/foreman/lib/satellite/version.rb",
                    "pattern": []
                }
            ]
        },
        "scsi": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/scsi/scsi",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/scsi/scsi",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/scsi/scsi",
                    "file": "/proc/scsi/scsi",
                    "pattern": []
                }
            ]
        },
        "secure": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/secure",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/secure",
                    "pattern": [
                        "error: session_pty_req: session"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/secure",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/secure",
                    "pattern": [
                        "error: session_pty_req: session"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/secure",
                    "file": "/var/log/secure",
                    "pattern": [
                        "error: session_pty_req: session"
                    ]
                }
            ]
        },
        "selinux-config": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/selinux/config",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/selinux/config",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/selinux/config",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/selinux/config",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/selinux/config",
                    "file": "/etc/selinux/config",
                    "pattern": []
                }
            ]
        },
        "sestatus": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/sestatus_-b",
                    "command": "/usr/sbin/sestatus -b",
                    "pattern": []
                }
            ]
        },
        "smbstatus_p": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/smbstatus_-p",
                    "command": "/usr/bin/smbstatus -p",
                    "pattern": []
                }
            ]
        },
        "softnet_stat": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/proc/net/softnet_stat",
                    "file": "{CONTAINER_MOUNT_POINT}/proc/net/softnet_stat",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/proc/net/softnet_stat",
                    "file": "/proc/net/softnet_stat",
                    "pattern": []
                }
            ]
        },
        "ss": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/ss_-tulpn",
                    "command": "/usr/sbin/ss -tulpn",
                    "pattern": []
                }
            ]
        },
        "sshd_config": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/ssh/sshd_config",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ssh/sshd_config",
                    "pattern": [
                        "ALLOWUSERS",
                        "AllowUsers",
                        "Allowusers",
                        "CHALLENGERESPONSEAUTHENTICATION",
                        "CIPHERS",
                        "CLIENTALIVECOUNTMAX",
                        "CLIENTALIVEINTERVAL",
                        "ChallengeResponseAuthentication",
                        "Challengeresponseauthentication",
                        "Ciphers",
                        "ClientAliveCountMax",
                        "ClientAliveInterval",
                        "Clientalivecountmax",
                        "Clientaliveinterval",
                        "DENYUSERS",
                        "DenyUsers",
                        "Denyusers",
                        "KBDINTERACTIVEAUTHENTICATION",
                        "KbdInteractiveAuthentication",
                        "Kbdinteractiveauthentication",
                        "LOGINGRACETIME",
                        "LoginGraceTime",
                        "Logingracetime",
                        "MACS",
                        "MACs",
                        "MAXAUTHTRIES",
                        "MAXSTARTUPS",
                        "Macs",
                        "MaxAuthTries",
                        "MaxStartups",
                        "Maxauthtries",
                        "Maxstartups",
                        "PERMITEMPTYPASSWORDS",
                        "PERMITROOTLOGIN",
                        "PROTOCOL",
                        "PermitEmptyPasswords",
                        "PermitRootLogin",
                        "Permitemptypasswords",
                        "Permitrootlogin",
                        "Protocol",
                        "USEPAM",
                        "UsePAM",
                        "UsePam",
                        "Usepam",
                        "allowusers",
                        "challengeresponseauthentication",
                        "ciphers",
                        "clientalivecountmax",
                        "clientaliveinterval",
                        "denyusers",
                        "kbdinteractiveauthentication",
                        "logingracetime",
                        "macs",
                        "maxauthtries",
                        "maxstartups",
                        "permitemptypasswords",
                        "permitrootlogin",
                        "protocol",
                        "usepam"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/ssh/sshd_config",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/ssh/sshd_config",
                    "pattern": [
                        "ALLOWUSERS",
                        "AllowUsers",
                        "Allowusers",
                        "CHALLENGERESPONSEAUTHENTICATION",
                        "CIPHERS",
                        "CLIENTALIVECOUNTMAX",
                        "CLIENTALIVEINTERVAL",
                        "ChallengeResponseAuthentication",
                        "Challengeresponseauthentication",
                        "Ciphers",
                        "ClientAliveCountMax",
                        "ClientAliveInterval",
                        "Clientalivecountmax",
                        "Clientaliveinterval",
                        "DENYUSERS",
                        "DenyUsers",
                        "Denyusers",
                        "KBDINTERACTIVEAUTHENTICATION",
                        "KbdInteractiveAuthentication",
                        "Kbdinteractiveauthentication",
                        "LOGINGRACETIME",
                        "LoginGraceTime",
                        "Logingracetime",
                        "MACS",
                        "MACs",
                        "MAXAUTHTRIES",
                        "MAXSTARTUPS",
                        "Macs",
                        "MaxAuthTries",
                        "MaxStartups",
                        "Maxauthtries",
                        "Maxstartups",
                        "PERMITEMPTYPASSWORDS",
                        "PERMITROOTLOGIN",
                        "PROTOCOL",
                        "PermitEmptyPasswords",
                        "PermitRootLogin",
                        "Permitemptypasswords",
                        "Permitrootlogin",
                        "Protocol",
                        "USEPAM",
                        "UsePAM",
                        "UsePam",
                        "Usepam",
                        "allowusers",
                        "challengeresponseauthentication",
                        "ciphers",
                        "clientalivecountmax",
                        "clientaliveinterval",
                        "denyusers",
                        "kbdinteractiveauthentication",
                        "logingracetime",
                        "macs",
                        "maxauthtries",
                        "maxstartups",
                        "permitemptypasswords",
                        "permitrootlogin",
                        "protocol",
                        "usepam"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/ssh/sshd_config",
                    "file": "/etc/ssh/sshd_config",
                    "pattern": [
                        "ALLOWUSERS",
                        "AllowUsers",
                        "Allowusers",
                        "CHALLENGERESPONSEAUTHENTICATION",
                        "CIPHERS",
                        "CLIENTALIVECOUNTMAX",
                        "CLIENTALIVEINTERVAL",
                        "ChallengeResponseAuthentication",
                        "Challengeresponseauthentication",
                        "Ciphers",
                        "ClientAliveCountMax",
                        "ClientAliveInterval",
                        "Clientalivecountmax",
                        "Clientaliveinterval",
                        "DENYUSERS",
                        "DenyUsers",
                        "Denyusers",
                        "KBDINTERACTIVEAUTHENTICATION",
                        "KbdInteractiveAuthentication",
                        "Kbdinteractiveauthentication",
                        "LOGINGRACETIME",
                        "LoginGraceTime",
                        "Logingracetime",
                        "MACS",
                        "MACs",
                        "MAXAUTHTRIES",
                        "MAXSTARTUPS",
                        "Macs",
                        "MaxAuthTries",
                        "MaxStartups",
                        "Maxauthtries",
                        "Maxstartups",
                        "PERMITEMPTYPASSWORDS",
                        "PERMITROOTLOGIN",
                        "PROTOCOL",
                        "PermitEmptyPasswords",
                        "PermitRootLogin",
                        "Permitemptypasswords",
                        "Permitrootlogin",
                        "Protocol",
                        "USEPAM",
                        "UsePAM",
                        "UsePam",
                        "Usepam",
                        "allowusers",
                        "challengeresponseauthentication",
                        "ciphers",
                        "clientalivecountmax",
                        "clientaliveinterval",
                        "denyusers",
                        "kbdinteractiveauthentication",
                        "logingracetime",
                        "macs",
                        "maxauthtries",
                        "maxstartups",
                        "permitemptypasswords",
                        "permitrootlogin",
                        "protocol",
                        "usepam"
                    ]
                }
            ]
        },
        "sshd_config_perms": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/ls_-l_.etc.ssh.sshd_config",
                    "command": "/bin/ls -l {CONTAINER_MOUNT_POINT}/etc/ssh/sshd_config",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/ls_-l_.etc.ssh.sshd_config",
                    "command": "/bin/ls -l {CONTAINER_MOUNT_POINT}/etc/ssh/sshd_config",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/ls_-l_.etc.ssh.sshd_config",
                    "command": "/bin/ls -l /etc/ssh/sshd_config",
                    "pattern": []
                }
            ]
        },
        "swift_object_expirer_conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/swift/object-expirer.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/swift/object-expirer.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/swift/object-expirer.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/swift/object-expirer.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/swift/object-expirer.conf",
                    "file": "/etc/swift/object-expirer.conf",
                    "pattern": []
                }
            ]
        },
        "swift_proxy_server_conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/swift/proxy-server.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/swift/proxy-server.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/swift/proxy-server.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/swift/proxy-server.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/swift/proxy-server.conf",
                    "file": "/etc/swift/proxy-server.conf",
                    "pattern": []
                }
            ]
        },
        "sysconfig_kdump": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/kdump",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/kdump",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/kdump",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/kdump",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/kdump",
                    "file": "/etc/sysconfig/kdump",
                    "pattern": []
                }
            ]
        },
        "sysconfig_mongod": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/()*mongod",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/()*mongod",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/sysconfig/()*mongod",
                    "pattern": []
                }
            ]
        },
        "sysconfig_ntpd": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/ntpd",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/ntpd",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/ntpd",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/ntpd",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/ntpd",
                    "file": "/etc/sysconfig/ntpd",
                    "pattern": []
                }
            ]
        },
        "sysconfig_rh_mongodb26": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-mongodb26/sysconfig/()*mongod",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/opt/rh/rh-mongodb26/sysconfig/()*mongod",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/opt/rh/rh-mongodb26/sysconfig/()*mongod",
                    "pattern": []
                }
            ]
        },
        "sysconfig_virt_who": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/virt-who",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/virt-who",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/virt-who",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/virt-who",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/virt-who",
                    "file": "/etc/sysconfig/virt-who",
                    "pattern": []
                }
            ]
        },
        "sysctl": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/sysctl_-a",
                    "command": "/sbin/sysctl -a",
                    "pattern": []
                }
            ]
        },
        "sysctl.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysctl.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysctl.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysctl.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysctl.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysctl.conf",
                    "file": "/etc/sysctl.conf",
                    "pattern": []
                }
            ]
        },
        "systemctl_cinder-volume": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/systemctl_show_openstack-cinder-volume",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} show openstack-cinder-volume",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/systemctl_show_openstack-cinder-volume",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} show openstack-cinder-volume",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/systemctl_show_openstack-cinder-volume",
                    "command": "/bin/systemctl show openstack-cinder-volume",
                    "pattern": []
                }
            ]
        },
        "systemctl_list-unit-files": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/systemctl_list-unit-files",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} list-unit-files",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/systemctl_list-unit-files",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} list-unit-files",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/systemctl_list-unit-files",
                    "command": "/bin/systemctl list-unit-files",
                    "pattern": []
                }
            ]
        },
        "systemctl_list-units": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/systemctl_list-units",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} list-units",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/systemctl_list-units",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} list-units",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/systemctl_list-units",
                    "command": "/bin/systemctl list-units",
                    "pattern": []
                }
            ]
        },
        "systemctl_mariadb": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/systemctl_show_mariadb",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} show mariadb",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/systemctl_show_mariadb",
                    "command": "/bin/systemctl --root={CONTAINER_MOUNT_POINT} show mariadb",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/systemctl_show_mariadb",
                    "command": "/bin/systemctl show mariadb",
                    "pattern": []
                }
            ]
        },
        "systemd_docker": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/usr/lib/systemd/system/docker.service",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/systemd/system/docker.service",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/usr/lib/systemd/system/docker.service",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/systemd/system/docker.service",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/usr/lib/systemd/system/docker.service",
                    "file": "/usr/lib/systemd/system/docker.service",
                    "pattern": []
                }
            ]
        },
        "systemd_openshift_node": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/usr/lib/systemd/system/atomic-openshift-node.service",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/systemd/system/atomic-openshift-node.service",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/usr/lib/systemd/system/atomic-openshift-node.service",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/systemd/system/atomic-openshift-node.service",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/usr/lib/systemd/system/atomic-openshift-node.service",
                    "file": "/usr/lib/systemd/system/atomic-openshift-node.service",
                    "pattern": []
                }
            ]
        },
        "systemd_system.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/systemd/system.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/systemd/system.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/systemd/system.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/systemd/system.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/systemd/system.conf",
                    "file": "/etc/systemd/system.conf",
                    "pattern": []
                }
            ]
        },
        "systemid": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/rhn/systemid",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/rhn/systemid",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/rhn/systemid",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/rhn/systemid",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/rhn/systemid",
                    "file": "/etc/sysconfig/rhn/systemid",
                    "pattern": []
                }
            ]
        },
        "teamdctl_state_dump": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/teamdctl__state_dump",
                    "command": "/usr/bin/teamdctl  state dump",
                    "pattern": [],
                    "pre_command": "iface"
                }
            ]
        },
        "thp_enabled": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/kernel/mm/transparent_hugepage/enabled",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/kernel/mm/transparent_hugepage/enabled",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/kernel/mm/transparent_hugepage/enabled",
                    "file": "/sys/kernel/mm/transparent_hugepage/enabled",
                    "pattern": []
                }
            ]
        },
        "thp_use_zero_page": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/kernel/mm/transparent_hugepage/use_zero_page",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/kernel/mm/transparent_hugepage/use_zero_page",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/kernel/mm/transparent_hugepage/use_zero_page",
                    "file": "/sys/kernel/mm/transparent_hugepage/use_zero_page",
                    "pattern": []
                }
            ]
        },
        "tmpfilesd": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/run/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/run/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/usr/lib/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/run/tmpfiles.d/()*.*\\.conf",
                    "pattern": []
                }
            ]
        },
        "tomcat_vdc_fallback": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/find_.usr.share_-maxdepth_1_-name_tomcat_-exec_.bin.grep_-R_-s_VirtualDirContext_--include_.xml",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/usr/share -maxdepth 1 -name tomcat* -exec /bin/grep -R -s VirtualDirContext --include *.xml {} +",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/find_.usr.share_-maxdepth_1_-name_tomcat_-exec_.bin.grep_-R_-s_VirtualDirContext_--include_.xml",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/usr/share -maxdepth 1 -name tomcat* -exec /bin/grep -R -s VirtualDirContext --include *.xml {} +",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/find_.usr.share_-maxdepth_1_-name_tomcat_-exec_.bin.grep_-R_-s_VirtualDirContext_--include_.xml",
                    "command": "/usr/bin/find /usr/share -maxdepth 1 -name 'tomcat*' -exec /bin/grep -R -s 'VirtualDirContext' --include '*.xml' '{}' +",
                    "pattern": []
                }
            ]
        },
        "tuned-adm": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/tuned-adm_list",
                    "command": "/usr/sbin/tuned-adm list",
                    "pattern": []
                }
            ]
        },
        "uname": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/uname_-a",
                    "command": "/bin/uname -a",
                    "pattern": []
                }
            ]
        },
        "up2date": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/sysconfig/rhn/up2date",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/rhn/up2date",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/sysconfig/rhn/up2date",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/sysconfig/rhn/up2date",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/sysconfig/rhn/up2date",
                    "file": "/etc/sysconfig/rhn/up2date",
                    "pattern": []
                }
            ]
        },
        "up2date_log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/up2date",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/up2date",
                    "pattern": [
                        "Temporary failure in name resolution"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/up2date",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/up2date",
                    "pattern": [
                        "Temporary failure in name resolution"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/up2date",
                    "file": "/var/log/up2date",
                    "pattern": [
                        "Temporary failure in name resolution"
                    ]
                }
            ]
        },
        "uptime": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/uptime",
                    "command": "/usr/bin/uptime",
                    "pattern": []
                }
            ]
        },
        "usr_journald.conf.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/systemd/journald.conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/usr/lib/systemd/journald.conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/usr/lib/systemd/journald.conf.d/()*.+\\.conf",
                    "pattern": []
                }
            ]
        },
        "vdsm.log": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/var/log/vdsm/vdsm.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/vdsm/vdsm.log",
                    "pattern": [
                        "16514': No route to host",
                        "The name org.fedoraproject.FirewallD1 was not provided by any .service files"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/var/log/vdsm/vdsm.log",
                    "file": "{CONTAINER_MOUNT_POINT}/var/log/vdsm/vdsm.log",
                    "pattern": [
                        "16514': No route to host",
                        "The name org.fedoraproject.FirewallD1 was not provided by any .service files"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/var/log/vdsm/vdsm.log",
                    "file": "/var/log/vdsm/vdsm.log",
                    "pattern": [
                        "16514': No route to host",
                        "The name org.fedoraproject.FirewallD1 was not provided by any .service files"
                    ]
                }
            ]
        },
        "vdsm_id": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/vdsm/vdsm.id",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/vdsm/vdsm.id",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/vdsm/vdsm.id",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/vdsm/vdsm.id",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/vdsm/vdsm.id",
                    "file": "/etc/vdsm/vdsm.id",
                    "pattern": []
                }
            ]
        },
        "vgdisplay": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/vgdisplay_-vv",
                    "command": "/sbin/vgdisplay -vv",
                    "pattern": []
                }
            ]
        },
        "vgs_noheadings": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/vgs_--nameprefixes_--noheadings_--separator_-a_-o_vg_all_--config_global_locking_type_0",
                    "command": "/sbin/vgs --nameprefixes --noheadings --separator='|' -a -o vg_all --config=\"global{locking_type=0}\"",
                    "pattern": []
                }
            ]
        },
        "virt-what": {
            "host": [
                {
                    "archive_file_name": "/insights_commands/virt-what",
                    "command": "/usr/sbin/virt-what",
                    "pattern": []
                }
            ]
        },
        "virt_who_conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*virt-who\\.conf",
                    "pattern": [
                        "[",
                        "configs",
                        "debug",
                        "env",
                        "interval",
                        "log_",
                        "oneshot",
                        "owner",
                        "server",
                        "type"
                    ]
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/virt-who.d/()*.*\\.conf",
                    "pattern": [
                        "[",
                        "configs",
                        "debug",
                        "env",
                        "interval",
                        "log_",
                        "oneshot",
                        "owner",
                        "server",
                        "type"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*virt-who\\.conf",
                    "pattern": [
                        "[",
                        "configs",
                        "debug",
                        "env",
                        "interval",
                        "log_",
                        "oneshot",
                        "owner",
                        "server",
                        "type"
                    ]
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/virt-who.d/()*.*\\.conf",
                    "pattern": [
                        "[",
                        "configs",
                        "debug",
                        "env",
                        "interval",
                        "log_",
                        "oneshot",
                        "owner",
                        "server",
                        "type"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/()*virt-who\\.conf",
                    "pattern": [
                        "[",
                        "configs",
                        "debug",
                        "env",
                        "interval",
                        "log_",
                        "oneshot",
                        "owner",
                        "server",
                        "type"
                    ]
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/virt-who.d/()*.*\\.conf",
                    "pattern": [
                        "[",
                        "configs",
                        "debug",
                        "env",
                        "interval",
                        "log_",
                        "oneshot",
                        "owner",
                        "server",
                        "type"
                    ]
                }
            ]
        },
        "vsftpd": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/pam.d/vsftpd",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/pam.d/vsftpd",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/pam.d/vsftpd",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/pam.d/vsftpd",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/pam.d/vsftpd",
                    "file": "/etc/pam.d/vsftpd",
                    "pattern": []
                }
            ]
        },
        "vsftpd.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/vsftpd/vsftpd.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/vsftpd/vsftpd.conf",
                    "pattern": [
                        "LOCAL_ENABLE",
                        "Local_Enable",
                        "SSL_ENABLE",
                        "SSL_SSLV3",
                        "Ssl_Enable",
                        "Ssl_Sslv3",
                        "local_enable",
                        "ssl_enable",
                        "ssl_sslv3"
                    ]
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/vsftpd/vsftpd.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/vsftpd/vsftpd.conf",
                    "pattern": [
                        "LOCAL_ENABLE",
                        "Local_Enable",
                        "SSL_ENABLE",
                        "SSL_SSLV3",
                        "Ssl_Enable",
                        "Ssl_Sslv3",
                        "local_enable",
                        "ssl_enable",
                        "ssl_sslv3"
                    ]
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/vsftpd/vsftpd.conf",
                    "file": "/etc/vsftpd/vsftpd.conf",
                    "pattern": [
                        "LOCAL_ENABLE",
                        "Local_Enable",
                        "SSL_ENABLE",
                        "SSL_SSLV3",
                        "Ssl_Enable",
                        "Ssl_Sslv3",
                        "local_enable",
                        "ssl_enable",
                        "ssl_sslv3"
                    ]
                }
            ]
        },
        "woopsie": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/find_.var.crash_.var.tmp_-path_.reports-_.whoopsie-report",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/var/crash {CONTAINER_MOUNT_POINT}/var/tmp -path *.reports-*/whoopsie-report",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/find_.var.crash_.var.tmp_-path_.reports-_.whoopsie-report",
                    "command": "/usr/bin/find {CONTAINER_MOUNT_POINT}/var/crash {CONTAINER_MOUNT_POINT}/var/tmp -path *.reports-*/whoopsie-report",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/find_.var.crash_.var.tmp_-path_.reports-_.whoopsie-report",
                    "command": "/usr/bin/find /var/crash /var/tmp -path '*.reports-*/whoopsie-report'",
                    "pattern": []
                }
            ]
        },
        "x86_ibpb_enabled": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/kernel/debug/x86/ibpb_enabled",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/kernel/debug/x86/ibpb_enabled",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/kernel/debug/x86/ibpb_enabled",
                    "file": "/sys/kernel/debug/x86/ibpb_enabled",
                    "pattern": []
                }
            ]
        },
        "x86_ibrs_enabled": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/kernel/debug/x86/ibrs_enabled",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/kernel/debug/x86/ibrs_enabled",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/kernel/debug/x86/ibrs_enabled",
                    "file": "/sys/kernel/debug/x86/ibrs_enabled",
                    "pattern": []
                }
            ]
        },
        "x86_pti_enabled": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/sys/kernel/debug/x86/pti_enabled",
                    "file": "{CONTAINER_MOUNT_POINT}/sys/kernel/debug/x86/pti_enabled",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/sys/kernel/debug/x86/pti_enabled",
                    "file": "/sys/kernel/debug/x86/pti_enabled",
                    "pattern": []
                }
            ]
        },
        "xinetd.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*xinetd\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/xinetd.d/()*.*",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/()*xinetd\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/xinetd.d/()*.*",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/()*xinetd\\.conf",
                    "pattern": []
                },
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/xinetd.d/()*.*",
                    "pattern": []
                }
            ]
        },
        "yum-repolist": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/commands/yum_-C_repolist",
                    "command": "/usr/bin/yum --installroot={CONTAINER_MOUNT_POINT} -C repolist",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/commands/yum_-C_repolist",
                    "command": "/usr/bin/yum --installroot={CONTAINER_MOUNT_POINT} -C repolist",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/insights_commands/yum_-C_repolist",
                    "command": "/usr/bin/yum -C repolist",
                    "pattern": []
                }
            ]
        },
        "yum.conf": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/etc/yum.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/yum.conf",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/etc/yum.conf",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/yum.conf",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/etc/yum.conf",
                    "file": "/etc/yum.conf",
                    "pattern": []
                }
            ]
        },
        "yum.repos.d": {
            "docker_container": [
                {
                    "archive_file_name": "/insights_data/container/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/yum.repos.d/()*.*\\.repo",
                    "pattern": []
                }
            ],
            "docker_image": [
                {
                    "archive_file_name": "/insights_data/image/rootfs/{EXPANDED_FILE_NAME}",
                    "file": "{CONTAINER_MOUNT_POINT}/etc/yum.repos.d/()*.*\\.repo",
                    "pattern": []
                }
            ],
            "host": [
                {
                    "archive_file_name": "/{EXPANDED_FILE_NAME}",
                    "file": "/etc/yum.repos.d/()*.*\\.repo",
                    "pattern": []
                }
            ]
        }
    },
    "version": "2019-01-03T13:24:09.999885"
}