Skip to content
Filip Halas edited this page Apr 3, 2014 · 11 revisions
Usage: gomatch (OPTIONAL: [FLAG] [ARGUMENT])

Options:
   -a, --a		Filepath for AMQP config file. (default none)
   -i, --i		Data input. (default STDIN)
   -n, --u		Unmatched data output. (default no_match.log)
   -o, --o		Matched data output. (default STDOUT)
   -p, --p		Patterns input. (default ./Patterns)
   -s, --s		Reading from socket. (default none, overrides -i) 
   -t, --t		Tokens input. (default ./Tokens)

RabbitMQ

Pass a config file with flag -a containing the following configuration parameters (see ./RabbitMQ):

amqp.receive.uri = 
amqp.receive.format = 
amqp.receive.queue = 
amqp.receive.exchange = 
amqp.matched.send.uri = 
amqp.matched.send.queue = 

The amqp.receive.format parameter can be either set to json or plain, if it is set to json, gomatch will be matching the following lines:

{"@stringAtt1":"value1","@stringAtt2":"value2",...,"@gomatch":LOG_TO_MATCH}

if it is set to plain, gomatch will be matching raw log data.

Clone this wiki locally