Snapshot 95 demo-tenant parsers (incl. stormshield) + un-ignore parsers/

The original upstream gitignores parsers/* on the assumption that each tenant
has its own set. This fork commits a working snapshot so the Parser Test Runner
and Parser Coverage features are usable out of the box.

Stormshield parser exercises the new SDL key=value scanner, pattern references,
and JS-style unquoted format keys added to backend/routers/quality.py.
This commit is contained in:
marc
2026-05-22 14:11:39 +02:00
parent 1e61fa9814
commit a9dcf48e65
96 changed files with 14742 additions and 5 deletions
+26
View File
@@ -0,0 +1,26 @@
{
attributes: {
class_uid: "5002",
category_uid: "4",
severity_id: "0",
class_name: "F5 Web Traffic",
category_name: "F5 HTTP Access Logs",
"metadata.product.name": "F5 BIG-IP",
"metadata.product.vendor_name": "F5 Networks",
"dataSource.category": "network",
"dataSource.name": "F5 BIG-IP",
"dataSource.vendor": "F5"
},
patterns: {
timestamp: "\\d{4}/\\d{2}/\\d{2}\\s+\\d{2}:\\d{2}:\\d{2}",
ipv4: "(?:\\d{1,3}\\.){3}\\d{1,3}",
quote: "\"[^\"]*\"",
number: "\\d+"
},
formats: [
{
format: ".*$_=identifier$=$_$(?:\\,|\\r)",
repeat: true
}
]
}