ai-security-xdr/haobang-security-dm/syslog-consumer/target/classes/com/common/util/SyslogParser.class

Êþº¾4
¤
tÝ
[Þ
[ßàá
â
sãä
så
sæç
Ý
[è
éê
Ýë
ì
è	sí
îï
ðñ–
ðò
óô
õö
÷ø
ùú
ûüý
þÿ





ª




™

[

s


	•	s



2Ý
2õ
s

2û
2
‰
s







[


	



















 
!
"
î
#
$
2
%
2

2é
&
2
'
2

(
PÝ
)
*
+´Ñ
,
-
.
,
/
,
0
1
2
,
3

4

5
6
[
7
[
8

5
9
[
:
;
[
<
=
>
[
?
@
A
B

C
D	s
E
F
G
H


I	s
J
K
L
logger
Lorg/slf4j/Logger;
RFC5424_PATTERN
Ljava/util/regex/Pattern;
RFC3164_PATTERN
RFC3164_FORMATTER
$Ljava/time/format/DateTimeFormatter;
<init>
()V
Code
LineNumberTable
LocalVariableTable
this
Lcom/common/util/SyslogParser;
parse
5(Ljava/lang/String;)Lcom/common/entity/SyslogMessage;
msg5424
"Lcom/common/entity/RFC5424Message;
msg3164
"Lcom/common/entity/RFC3164Message;
content
Ljava/lang/String;
msgClass
logLine

StackMapTableä
parseRFC5424
6(Ljava/lang/String;)Lcom/common/entity/RFC5424Message;

e
)Ljava/time/format/DateTimeParseException;
matcher
Ljava/util/regex/Matcher;
message
pri

I
timestampStr
sd
msg
M
1çü
parseRFC3164
6(Ljava/lang/String;)Lcom/common/entity/RFC3164Message;
parseRFC3164Timestamp
.(Ljava/lang/String;)Ljava/time/OffsetDateTime;
currentYear

fullTimestamp
	formatter

localDateTime
Ljava/time/LocalDateTime;
parseRFC3164Content
7(Ljava/lang/String;Lcom/common/entity/RFC3164Message;)V
pid

tagPattern

tagMatcher
N
parseStructuredData
#(Ljava/lang/String;)Ljava/util/Map;
	sdElement
params
Ljava/util/Map;
paramMatcher
key
structuredData
	sdPattern
paramPattern
	sdMatcher
LocalVariableTypeTable
5Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;
XLjava/util/Map<Ljava/lang/String;Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;>;
O
	Signature
l(Ljava/lang/String;)Ljava/util/Map<Ljava/lang/String;Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;>;
extractJsonString
((Ljava/lang/String;)Ljava/util/Optional;
	jsonStart
Ljava/lang/Exception;

syslogMessage
<(Ljava/lang/String;)Ljava/util/Optional<Ljava/lang/String;>;
extractJsonStringNew
&(Ljava/lang/String;)Ljava/lang/String;
substringAfterFirstCloseBracket
text
closeBracketIndex
substringBeforeFirstChar
'(Ljava/lang/String;C)Ljava/lang/String;

delimiterChar

C
delimiterIndex
parseKeyValuePairs
	equalSign
value
pair
start
end
pairs
[Ljava/lang/String;
resultÖ
I(Ljava/lang/String;)Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;
<clinit>

SourceFile
SyslogParser.java|}
P
Q
R
S
"java/lang/IllegalArgumentException
 Log line cannot be null or empty|
T��
java/lang/ExceptionŸ ÅÆ
 com/common/entity/RFC5424Message
U
Q
V
T
java/lang/StringBuilder
 Unable to parse syslog message: 
W
Xwx
N“
Y
M
Z
S
[Æ
\
]
^
_
`
version
a
`
	timestamp
bƒ
c
d
e
'java/time/format/DateTimeParseException
Invalid RFC5424 timestamp: |
f
host
g
T
app
h
T
i
T
msgid
j
T

-
k
l®¯
m
nyx
 com/common/entity/RFC3164Message¡¢¨©
o
p
q
r
s
t
u

 
yyyy MMM dd HH:mm:ss
v
w
x
y
z
{
|ƒ
}
~

€
�
‚
ƒ
„
…
†
‡
ˆ
Invalid RFC3164 timestamp: 
4^(?<tag>\S+?)(?:\[(?<pid>\d+)\])?:\s*(?<message>.*)$
‰
Š
tag
‹
T

Œ
Q
java/util/HashMap
\[(?<id>[^\]]+)\]
!(?<key>[^=\s]+)="(?<value>[^"]*)"
id
O
�
Ž
sdId
�
l
�
‘
java/lang/String
element
’
s
W
“
”
•
–
—
˜
™
u
š
›
™
œ
"Input text cannot be null or empty
—
�
No valid [] pair found in text
\s+
ž
Ÿ
Invalid key-value pair format: 
Key cannot be empty in pair: 
com/influx/SyslogToInfluxApp
 
¡
¢uv
�^<(?<pri>\d{1,3})>(?<version>\d+) (?<timestamp>\S+) (?<host>\S+) (?<app>\S+) (?<pid>\S+) (?<msgid>\S+) (?<sd>(?:-|\[.*\]))(?: (?<message>.+))?$
h^<(?<pri>\d{1,3})>(?<timestamp>[A-Z][a-z]{2}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}) (?<host>\S+) (?<content>.+)$
MMM dd HH:mm:ss
z
£z{
com/common/util/SyslogParser
java/lang/Object
java/util/regex/Matcher
java/util/regex/Pattern

java/util/Map
trim
()Ljava/lang/String;
isEmpty
()Z
(Ljava/lang/String;)V
toString

setMessage
append
-(Ljava/lang/String;)Ljava/lang/StringBuilder;
3(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
find
group
java/lang/Integer
parseInt
(Ljava/lang/String;)I
setPriority
(I)V

setVersion
java/time/OffsetDateTime
4(Ljava/lang/CharSequence;)Ljava/time/OffsetDateTime;
setTimestamp
(Ljava/time/OffsetDateTime;)V
*(Ljava/lang/String;Ljava/lang/Throwable;)V
setHostname

setAppName
	setProcId
setMsgId
equals
(Ljava/lang/Object;)Z
setStructuredData
(Ljava/util/Map;)V
java/time/Year
now
()Ljava/time/Year;
getValue
()I
valueOf
(I)Ljava/lang/String;
java/util/Locale
US
Ljava/util/Locale;
"java/time/format/DateTimeFormatter
	ofPattern
J(Ljava/lang/String;Ljava/util/Locale;)Ljava/time/format/DateTimeFormatter;
java/time/LocalDateTime
W(Ljava/lang/CharSequence;Ljava/time/format/DateTimeFormatter;)Ljava/time/LocalDateTime;
java/time/ZoneOffset

systemDefault
()Ljava/time/ZoneId;
java/time/ZoneId
getRules
()Ljava/time/zone/ZoneRules;
java/time/zone/ZoneRules
	getOffset
1(Ljava/time/LocalDateTime;)Ljava/time/ZoneOffset;
atOffset
2(Ljava/time/ZoneOffset;)Ljava/time/OffsetDateTime;
compile
-(Ljava/lang/String;)Ljava/util/regex/Pattern;
setTag
getTag
put
8(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
containsKey
get
&(Ljava/lang/Object;)Ljava/lang/Object;
size
(I)Ljava/lang/StringBuilder;
java/util/Optional
empty
()Ljava/util/Optional;
indexOf
(I)I
	substring
of
((Ljava/lang/Object;)Ljava/util/Optional;
(II)Ljava/lang/String;
(II)I
split
'(Ljava/lang/String;)[Ljava/lang/String;
org/slf4j/LoggerFactory
	getLogger
%(Ljava/lang/Class;)Lorg/slf4j/Logger;
8(Ljava/lang/String;)Ljava/time/format/DateTimeFormatter;!stuvwxyxz{

|}
~/

*·
±
€
�‚	ƒ„
~
Bp*Æ
*¶¶™
»Y·¿*¸L+Æ+°§L*¸	L+Æ+°§L*¸
L»Y·M+Æ
,+¶
¶,°§L»Y»Y·¶*¶¶·¿"&'156PTR56:;!<#@&>'D,E0F2J5H6M;NCOGPOQQUTSUV€4…†
,‡ˆ
;‰Š
C‹†pŒŠ�	
BŽ