librenms-librenms/includes/syslog.php

<?php

function process_syslog ($entry, $update)
{
  global $config;

  foreach ($config['syslog_filter'] as $bi)
  {
    if (strstr($entry['msg'], $bi) !== FALSE)
    {
        $delete = 1;
    }
  }

  if (strstr($entry['msg'], "diskio.c: don't know how to handle") !== FALSE)
  {
    $delete = 1;
  }

  $device_id_host = @dbFetchCell("SELECT device_id FROM devices WHERE `hostname` = '".mres($entry['host'])."' OR `sysName` = '".mres($entry['host'])."'");

  if ($device_id_host)
  {
    $entry['device_id'] = $device_id_host;
  }
  else
  {
    $device_id_ip = @dbFetchCell("SELECT device_id FROM ipv4_addresses AS A, ports AS I WHERE A.ipv4_address = '" . $entry['host']."' AND I.interface_id = A.interface_id");
    if ($device_id_ip)
    {
      $entry['device_id'] = $device_id_ip;
    }
  }

  if ($entry['device_id'] && !$delete)
  {
    $os = dbFetchCell("SELECT `os` FROM `devices` WHERE `device_id` = '".mres($entry['device_id'])."'");
    if ($os == 'catos')
    {
      $matches = array();
      preg_match('#%(?P<program>[A-Z0-9\-_]*):(?P<msg>(.*))#', $entry['msg'], $matches);
      $entry['msg'] = $matches['msg'];
      $entry['program'] = $matches['program'];
      unset($matches);
    }
    elseif ($os == "ios" || $os == "iosxe")
    {
      if (strstr($entry[msg], "%"))
      {
        $entry['msg'] = preg_replace("/^%(.+?):\ /", "\\1||", $entry['msg']);
        list(,$entry[msg]) = explode(": %", $entry['msg']);
        $entry['msg'] = "%" . $entry['msg'];
        $entry['msg'] = preg_replace("/^%(.+?):\ /", "\\1||", $entry['msg']);
      }
      else
      {
        $entry['msg'] = preg_replace("/^.*[0-9]:/", "", $entry['msg']);
        $entry['msg'] = preg_replace("/^[0-9][0-9]\ [A-Z]{3}:/", "", $entry['msg']);
        $entry['msg'] = preg_replace("/^(.+?):\ /", "\\1||", $entry['msg']);
      }

      $entry['msg'] = preg_replace("/^.+\.[0-9]{3}:/", "", $entry['msg']);
      $entry['msg'] = preg_replace("/^.+-Traceback=/", "Traceback||", $entry['msg']);

      list($entry['program'], $entry['msg']) = explode("||", $entry['msg']);
      $entry['msg'] = preg_replace("/^[0-9]+:/", "", $entry['msg']);

      if (!$entry['program'])
      {
         $entry['msg'] = preg_replace("/^([0-9A-Z\-]+?):\ /", "\\1||", $entry['msg']);
	 list($entry['program'], $entry['msg']) = explode("||", $entry['msg']);
      }

      if (!$entry['msg']) { $entry['msg'] = $entry['program']; unset ($entry['program']); }

    }
    else
    {
      $program = preg_quote($entry['program'],'/');
      $entry['msg'] = preg_replace("/^$program:\ /", "", $entry['msg']);
#      if (preg_match("/^[a-zA-Z\/]+\[[0-9]+\]:/", $entry['msg'])) {
        $entry['msg'] = preg_replace("/^(.+?)\[[0-9]+\]:\ /", "\\1||", $entry['msg']);
        if (!strstr($entry['msg'], "||")) { $entry['msg'] = preg_replace("/^(.+?):\ /", "\\1||", $entry['msg']); }
        list($entry['program'], $entry['msg']) = explode("||", $entry['msg']);
        $entry['program'] = preg_replace("@\-[0-9]+@", "", $entry['program']);
#      }
    }
    $entry['program'] = strtoupper($entry['program']);
    #$x  = "UPDATE `syslog` set `device_id` = '".$entry['device_id']."', `program` = '".$entry['program']."', `msg` = '" . mres($entry['msg']) . "', processed = '1' WHERE `seq` = '" . $entry['seq'] . "'";

    $insert_array = array('device_id' => $entry['device_id'], 'program' => $entry['program'], 'facility' => $entry['facility'], 'priority' => $entry['priority'],
                          'level' => $entry['level'], 'tag' => $entry['tag'], 'msg' => $entry['msg'], 'timestamp' => $entry['timestamp']);

    if ($update && $entry['device_id']) { dbInsert($insert_array, 'syslog'); }
    unset ($fix);
  } else { print_r($entry); echo("D-$delete"); }

  return $entry;
}

?>