From 42c840bdd5c172f534754638e0dc8f4e766a4547 Mon Sep 17 00:00:00 2001
From: Rob Berlang <robberlang@tutanota.com>
Date: Thu, 27 Feb 2020 16:10:14 +0100
Subject: [PATCH] patch k8s-nginx-ingress parser configuration to match latest
 ingress-nginx version -add missing user field

Signed-off-by: Rob Berlang <robberlang@tutanota.com>
---
 conf/parsers.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/conf/parsers.conf b/conf/parsers.conf
index 5cb43350ec9..2b5e58a5d23 100644
--- a/conf/parsers.conf
+++ b/conf/parsers.conf
@@ -25,10 +25,10 @@
     Time_Format %d/%b/%Y:%H:%M:%S %z
 
 [PARSER]
-    # https://rubular.com/r/P8zgLD5K73fp2n
+    # https://rubular.com/r/IhIbCAIs7ImOkc
     Name        k8s-nginx-ingress
     Format      regex
-    Regex       ^(?<host>[^ ]*) - - \[(?<time>[^\]]*)\] \\*"(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?\\*" (?<code>[^ ]*) (?<size>[^ ]*) \\*"(?<referer>[^\"]*)\\*" \\*"(?<agent>[^\"]*)\\*" (?<request_length>[^ ]*) (?<request_time>[^ ]*) \[(?<proxy_upstream_name>[^ ]*)\] (\[(?<proxy_alternative_upstream_name>[^ ]*)\] )?(?<upstream_addr>[^ ]*) (?<upstream_response_length>[^ ]*) (?<upstream_response_time>[^ ]*) (?<upstream_status>[^ ]*) (?<reg_id>[^ ]*).*$
+    Regex       ^(?<host>[^ ]*) - (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?" (?<code>[^ ]*) (?<size>[^ ]*) "(?<referer>[^\"]*)" "(?<agent>[^\"]*)" (?<request_length>[^ ]*) (?<request_time>[^ ]*) \[(?<proxy_upstream_name>[^ ]*)\] (\[(?<proxy_alternative_upstream_name>[^ ]*)\] )?(?<upstream_addr>[^ ]*) (?<upstream_response_length>[^ ]*) (?<upstream_response_time>[^ ]*) (?<upstream_status>[^ ]*) (?<reg_id>[^ ]*).*$
     Time_Key    time
     Time_Format %d/%b/%Y:%H:%M:%S %z