ai-security-xdr/haobang-security-dm/syslog-consumer-rule/target/classes/com/common/util/SyslogParser.class

Êþº¾4
¥
tÞ
[ß
[àáâ
ã
säå
sæ
sçè
Þ
[é
êë
Þì
í
é	sî
ïð
ñò—
ñó
ôõ
ö÷
øù
úû
üýþ
ÿ






«




š

[

s
	


–	s


2Þ
2ö
s

2ü
2

‰
s







[


	
















 


!
"
#
ï
$
%
2
&
2

2ê
'
2
(
2

)
PÞ
*
+
,µÒ
-
.
/
-
0
-
1
2
3
-
4

5

6
7
[
8
[
9

6
:
[
;
<
[
=
>
?
[
@
A
B
C

D
E	s
F
G
H
I


J	s
K
L
M
logger
Lorg/slf4j/Logger;
RFC5424_PATTERN
Ljava/util/regex/Pattern;
RFC3164_PATTERN
RFC3164_FORMATTER
$Ljava/time/format/DateTimeFormatter;
<init>
()V
Code
LineNumberTable
LocalVariableTable
this
Lcom/common/util/SyslogParser;
parse
5(Ljava/lang/String;)Lcom/common/entity/SyslogMessage;
msg5424
"Lcom/common/entity/RFC5424Message;
msg3164
"Lcom/common/entity/RFC3164Message;
content
Ljava/lang/String;
msgClass
logLine

StackMapTableå
MethodParameters
parseRFC5424
6(Ljava/lang/String;)Lcom/common/entity/RFC5424Message;

e
)Ljava/time/format/DateTimeParseException;
matcher
Ljava/util/regex/Matcher;
message
pri

I
timestampStr
sd
msg
N
2èý
parseRFC3164
6(Ljava/lang/String;)Lcom/common/entity/RFC3164Message;
parseRFC3164Timestamp
.(Ljava/lang/String;)Ljava/time/OffsetDateTime;
currentYear

fullTimestamp
	formatter

localDateTime
Ljava/time/LocalDateTime;
parseRFC3164Content
7(Ljava/lang/String;Lcom/common/entity/RFC3164Message;)V
pid

tagPattern

tagMatcher
O
parseStructuredData
#(Ljava/lang/String;)Ljava/util/Map;
	sdElement
params
Ljava/util/Map;
paramMatcher
key
structuredData
	sdPattern
paramPattern
	sdMatcher
LocalVariableTypeTable
5Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;
XLjava/util/Map<Ljava/lang/String;Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;>;
P
	Signature
l(Ljava/lang/String;)Ljava/util/Map<Ljava/lang/String;Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;>;
extractJsonString
((Ljava/lang/String;)Ljava/util/Optional;
	jsonStart
Ljava/lang/Exception;

syslogMessage
<(Ljava/lang/String;)Ljava/util/Optional<Ljava/lang/String;>;
extractJsonStringNew
&(Ljava/lang/String;)Ljava/lang/String;
substringAfterFirstCloseBracket
text
closeBracketIndex
substringBeforeFirstChar
'(Ljava/lang/String;C)Ljava/lang/String;

delimiterChar

C
delimiterIndex
parseKeyValuePairs
	equalSign
value
pair
start
end
pairs
[Ljava/lang/String;
result×
I(Ljava/lang/String;)Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;
<clinit>

SourceFile
SyslogParser.java|}
Q
R
S
T
"java/lang/IllegalArgumentException
 Log line cannot be null or empty|
U�‘
java/lang/Exception ¡ÆÇ
 com/common/entity/RFC5424Message
V
R
W
U
java/lang/StringBuilder
 Unable to parse syslog message: 
X
Ywx
O”
Z
N
[
T
\Ç
]
^
_
`
a
version
b
a
	timestamp
cƒ
d
e
f
'java/time/format/DateTimeParseException
Invalid RFC5424 timestamp: |
g
host
h
U
app
i
U
j
U
msgid
k
U

-
l
m¯°
n
oyx
 com/common/entity/RFC3164Message¢£©ª
p
q
r
s
t
u
v

 
yyyy MMM dd HH:mm:ss
w
x
y
z
{
|
}ƒ
~

€
�
‚
ƒ
„
…
†
‡
ˆ
‰
Invalid RFC3164 timestamp: 
4^(?<tag>\S+?)(?:\[(?<pid>\d+)\])?:\s*(?<message>.*)$
Š
‹
tag
Œ
U

�
R
java/util/HashMap
\[(?<id>[^\]]+)\]
!(?<key>[^=\s]+)="(?<value>[^"]*)"
id
P
Ž
�
sdId
�
m
‘
’
java/lang/String
element
“
t
X
”
•
–
—
˜
™
š
v
›
œ
š
�
"Input text cannot be null or empty
˜
ž
No valid [] pair found in text
\s+
Ÿ
 
Invalid key-value pair format: 
Key cannot be empty in pair: 
com/influx/SyslogToInfluxApp
¡
¢
£uv
�^<(?<pri>\d{1,3})>(?<version>\d+) (?<timestamp>\S+) (?<host>\S+) (?<app>\S+) (?<pid>\S+) (?<msgid>\S+) (?<sd>(?:-|\[.*\]))(?: (?<message>.+))?$
h^<(?<pri>\d{1,3})>(?<timestamp>[A-Z][a-z]{2}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}) (?<host>\S+) (?<content>.+)$
MMM dd HH:mm:ss
{
¤z{
com/common/util/SyslogParser
java/lang/Object
java/util/regex/Matcher
java/util/regex/Pattern

java/util/Map
trim
()Ljava/lang/String;
isEmpty
()Z
(Ljava/lang/String;)V
toString

setMessage
append
-(Ljava/lang/String;)Ljava/lang/StringBuilder;
3(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
find
group
java/lang/Integer
parseInt
(Ljava/lang/String;)I
setPriority
(I)V

setVersion
java/time/OffsetDateTime
4(Ljava/lang/CharSequence;)Ljava/time/OffsetDateTime;
setTimestamp
(Ljava/time/OffsetDateTime;)V
*(Ljava/lang/String;Ljava/lang/Throwable;)V
setHostname

setAppName
	setProcId
setMsgId
equals
(Ljava/lang/Object;)Z
setStructuredData
(Ljava/util/Map;)V
java/time/Year
now
()Ljava/time/Year;
getValue
()I
valueOf
(I)Ljava/lang/String;
java/util/Locale
US
Ljava/util/Locale;
"java/time/format/DateTimeFormatter
	ofPattern
J(Ljava/lang/String;Ljava/util/Locale;)Ljava/time/format/DateTimeFormatter;
java/time/LocalDateTime
W(Ljava/lang/CharSequence;Ljava/time/format/DateTimeFormatter;)Ljava/time/LocalDateTime;
java/time/ZoneOffset

systemDefault
()Ljava/time/ZoneId;
java/time/ZoneId
getRules
()Ljava/time/zone/ZoneRules;
java/time/zone/ZoneRules
	getOffset
1(Ljava/time/LocalDateTime;)Ljava/time/ZoneOffset;
atOffset
2(Ljava/time/ZoneOffset;)Ljava/time/OffsetDateTime;
compile
-(Ljava/lang/String;)Ljava/util/regex/Pattern;
setTag
getTag
put
8(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
containsKey
get
&(Ljava/lang/Object;)Ljava/lang/Object;
size
(I)Ljava/lang/StringBuilder;
java/util/Optional
empty
()Ljava/util/Optional;
indexOf
(I)I
	substring
of
((Ljava/lang/Object;)Ljava/util/Optional;
(II)Ljava/lang/String;
(II)I
split
'(Ljava/lang/String;)[Ljava/lang/String;
org/slf4j/LoggerFactory
	getLogger
%(Ljava/lang/Class;)Lorg/slf4j/Logger;
8(Ljava/lang/String;)Ljava/time/format/DateTimeFormatter;!stuvwxyxz{

|}
~/

*·
±
€
�‚	ƒ„~
Bp*Æ
*¶¶™
»Y·¿*¸L+Æ+°§L*¸	L+Æ+°§L*¸
L»Y·M+Æ
,+¶
¶,°§L»Y»Y·¶*¶¶·¿"&'156PTR56:;!<#@&>'D,E0F2J5H6M;NCOGPOQQUTSUV€4…†
,‡ˆ
;‰Š
C‹†pŒŠ�	
BŽ