blob: 9b243c9cdaca8047a2755c0a29af6a9794f0849c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
%YAML 1.2
---
# http://www.sublimetext.com/docs/3/syntax.html
name: syslog
file_extensions:
- syslog
scope: text.syslog
variables:
ipv4_part: (?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)
contexts:
main:
- match: ^(\w+\s+\d+)\s+(\d{2}:\d{2}:\d{2})
scope: meta.datetime.syslog constant.numeric.syslog
captures:
1: meta.date.syslog
2: meta.time.syslog
push: loghost
loghost:
- match: '[\w-]+'
scope: entity.other.attribute-name.loghost.syslog
set: process
process:
- match: ([\w-]+)(?:(\[)(\d+)(\]))?(:)
captures:
1: support.function.process.syslog
2: punctuation.separator.pid.begin.syslog
3: meta.pid.syslog meta.number.integer.syslog constant.numeric.value.syslog
4: punctuation.separator.pid.end.syslog
5: punctuation.separator.mapping.syslog
set: structured-data
structured-data:
- match: '\['
scope: punctuation.section.mapping.begin.syslog
push:
- match: \]
scope: punctuation.section.mapping.end.syslog
pop: true
- match: \w+
scope: variable.parameter.syslog
- match: =
scope: keyword.operator.assignment.syslog
push:
- match: '[^\s\]]+'
scope: constant.other.syslog
pop: true
- match: (?=\])
pop: true
- match: (?=\S)
set: text
text:
- match: (\w+)(=)
captures:
1: variable.parameter.syslog
2: keyword.operator.assignment.syslog
- match: (')([^']*)(')
scope: string.quoted.single.syslog
captures:
1: punctuation.definition.string.begin.syslog
3: punctuation.definition.string.end.syslog
- match: (")([^"]*)(")
scope: string.quoted.double.syslog
captures:
1: punctuation.definition.string.begin.syslog
3: punctuation.definition.string.end.syslog
- include: numbers
- match: \b(CMD)\b\s+(\()
captures:
1: entity.name.label.syslog
2: punctuation.section.block.begin.syslog
embed: scope:source.shell.bash
escape: \)$
escape_captures:
0: punctuation.section.block.end.syslog
- match: '<\w+>'
scope: constant.language.syslog
- match: (?i:fail(?:ure|ed)?|error)
scope: invalid.illegal.error.syslog
- match: $
pop: true
numbers:
- match: (?=(?:{{ipv4_part}}\.){3}{{ipv4_part}})
push:
- meta_scope: meta.ipaddress.v4.syslog meta.number.integer.decimal.syslog
- match: \d+
scope: constant.numeric.value.syslog
- match: \.
scope: punctuation.separator.sequence.syslog
- match: ''
pop: true
- match: (?=(?:\h{0,4}:){2,6}\h{1,4})
push:
- meta_scope: meta.ipaddress.v6.syslog meta.number.integer.hexadecimal.syslog
- match: \h{1,4}
scope: constant.numeric.value.syslog
- match: ':'
scope: punctuation.separator.sequence.syslog
- match: ''
pop: true
- match: (0x)(\h+)(?:(\.)(\h+))?
scope: meta.number.float.hexadecimal.syslog
captures:
1: constant.numeric.base.syslog
2: constant.numeric.value.syslog
3: constant.numeric.value.syslog punctuation.separator.decimal.syslog
4: constant.numeric.value.syslog
- match: \b\d+(\.)\d+\b
scope: meta.number.float.syslog constant.numeric.value.syslog
captures:
1: punctuation.separator.decimal.syslog
- match: \b\d+\b
scope: meta.number.integer.syslog constant.numeric.value.syslog
|
