[vmw_log] update for recent changes to formatx

tstack · tstack · commit 5bb3eea03568 · 2025-06-18T09:50:13.000-07:00
diff --git a/src/formats/vmw_log.json b/src/formats/vmw_log.json
@@ -5,11 +5,8 @@
         "description": "One of the log formats used in VMware's ESXi and vCenter software.",
         "url": "https://kb.vmware.com/kb/2004201",
         "regex": {
-            "9.0+": {
-                "pattern": "^(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?<level>\\w+)(?:\\(\\d+\\)+)? (?<prc>[\\w\\-]+)\\s?\\[?(?<tid>\\w+)\\]?:? (?:\\w+ -\\[\\d+\\] )?\\[(?<src>[a-zA-Z][\\w:]*(?:@\\d+)?)(?:\\s+sub=\\\"?(?<sub>.*?(?!\\w+=))\\\"?)?(?:\\s+item=\\\"?(?<item>[\\w\\.\\-@/:]+)\\\"?)?(?: req=\\\"?(?<req>[^ \\]]+)\\\"?)?(?: opI(?:D|d)=\\\"?(?<opid>(?:req=)?[\\w@ \\-\\.:]+?(?!\\w+=))\\\"?)?(?: sid=\\\"?(?<sid>[^ \\]]+)\\\"?)?(?: user=\\\"(?<user>[^ \\]<]+(?:<[^>]+>)?\\\"?))?(?: update=\\\"?(?<vpxa_update>\\d+)\\\"?)?(?:\\s+reason=\\\"?(?<reason>[^\\]]+)\\\"?)?\\]\\s+(?:\\[(?<file>[^ ]+)\\s+(?<line>\\d+)\\]\\s+)?(?<body>.*)$"
-            },
             "6.0+": {
-                "pattern": "^(?:\\[#\\d+\\] )?(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?<level>\\w+)(?:\\(\\d+\\)+)? (?<prc>[\\w\\-]+)\\[(?<tid>\\w+)\\]:? (?:\\w+ -\\[\\d+\\] )?\\[(?<src>[a-zA-Z][\\w:]*(?:@\\d+)?)(?:\\s+sub=(?<sub>.*?(?!\\w+=)))?(?:\\s+item=(?<item>[\\w\\.\\-@/:]+))?(?: req=(?<req>[^ \\]]+))?(?: opI(?:D|d)=(?<opid>(?:req=)?[\\w@ \\-\\.:]+?(?!\\w+=)))?(?: sid=(?<sid>[^ \\]]+))?(?: user=(?<user>[^ \\]<]+(?:<[^>]+>)?))?(?: update=(?<vpxa_update>\\d+))?(?:\\s+reason=(?<reason>[^\\]]+))?\\]\\s+(?:\\[(?<file>[^ ]+)\\s+(?<line>\\d+)\\]\\s+)?(?<body>.*)$"
+                "pattern": "^(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?<level>\\w+)(?:\\(\\d+\\)+)? (?<prc>[\\w\\-]+)\\s?\\[?(?<tid>\\w+)\\]?:? (?:\\w+ -\\[\\d+\\] )?\\[(?<src>[a-zA-Z][\\w:]*(?:@\\d+)?)(?:\\s+sub=\\\"?(?<sub>.*?(?!\\w+=))\\\"?)?(?:\\s+item=\\\"?(?<item>[\\w\\.\\-@/:]+)\\\"?)?(?: req=\\\"?(?<req>[^ \\]]+)\\\"?)?(?: opI(?:D|d)=\\\"?(?<opid>(?:req=)?[\\w@ \\-\\.:]+?(?!\\w+=))\\\"?)?(?: sid=\\\"?(?<sid>[^ \\]]+)\\\"?)?(?: user=\\\"(?<user>[^ \\]<]+(?:<[^>]+>)?\\\"?))?(?: update=\\\"?(?<vpxa_update>\\d+)\\\"?)?(?:\\s+reason=\\\"?(?<reason>[^\\]]+)\\\"?)?\\]\\s+(?:\\[(?<file>[^ ]+)\\s+(?<line>\\d+)\\]\\s+)?(?<body>.*)$"
             },
             "6.0+-nosrc": {
                 "pattern": "^(?<timestamp>\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}(?:Z|[-+]\\d{2}:\\d{2})) (?<level>\\w+)(?:\\(\\d+\\)+)? (?<prc>[\\w\\-]+)\\[(?<tid>\\w+)\\]:? \\[(?:opI(?:D|d)=(?<opid>[^\\]]+))\\]\\s*(?<body>.*)$"
