{
"name": "Simple Counters",
"description": "Report counts messages with keywords.",
"context": {
"extractor": "",
"fields": ""
},
"collector": {
"cmds": [
{
"cmd": "UPDATE Counters SET Value = Value + 1 WHERE Name = 'Keyword1';",
"filter": "{MESSAGE} CONTAINS \"Keyword1\""
},
{
"cmd": "UPDATE Counters SET Value = Value + 1 WHERE Name = 'Keyword2';",
"filter": "{MESSAGE} CONTAINS \"Keyword2\""
}
],
"cmd_pre": "CREATE TABLE Counters (Name TEXT PRIMARY KEY, Value INTEGER);\r\n\r\nINSERT INTO Counters (Name, Value) VALUES\r\n ('Keyword1', 0),\r\n ('Keyword2', 0);",
"cmd_post": "",
"debug_copy": ""
},
"output": {
"body": "\r\n\r\n \r\n \r\n Syslog report: Counters<\/title>\r\n <\/head>\r\n <body>\r\n <h1>Syslog report: Counters<\/h1>\r\n <p>{FROM_S|%F %T} - {TO_S|%F %T}<\/p>\r\n <ul>\r\n <li>Keyword1: {{EXECUTE SELECT Value FROM Counters WHERE Name='Keyword1';}}{0}{{END}}<\/li>\r\n <li>Keyword2: {{EXECUTE SELECT Value FROM Counters WHERE Name='Keyword2';}}{0}{{END}}<\/li>\r\n <\/ul>\r\n <\/body>\r\n<\/html>",
"filename": "Counters-{GENERATED_S|%Y-%m-%dT%H-%M-%S}.html",
"dir": ""
}
}