<#|2014 Jul 29 16:20:20|INFO|JAVA_TEST_1.0.0|sun.java.jsf.managedbean.AuthenticationMgr|DEFAULT|Login successful for user 'usr0001'|APPLICATION USER|#> <#|2014 Jul 29 16:26:08|INFO|JAVA_TEST_1.0.0|sun.java.jsf.managedbean.AuthenticationMgr|DEFAULT|Login successful for user 'usr0005'|APPLICATION USER|#> <#|2014 Jul 28 16:20:55|INFO|JAVA_TEST_1.0.0|sun.java.jsf.managedbean.AuthenticationMgr|DEFAULT|Login successful for user 'usr0006'|APPLICATION USER|#> <#|2014 Jul 28 16:22:44|INFO|JAVA_TEST_1.0.0|sun.java.jsf.managedbean.user.UserRoleMgr|DEFAULT|Assigned roles for user 'usr0002' were modified by user 'usr0006'|APPLICATION USER|#> #### Application Error::Error Succesful Authorization::User Logged Succesfully Failed Authorization::User logon failed/unsuccesful #### /usr/bin/perl /dir/perl/test.pl ${infile} ${outfile} cat test.pl #!/usr/bin/perl $dir="/dir"; $infile = $ARGV[0]; $outfile = $ARGV[1]; $configfile="$dir/conf/EventType.conf"; open(FILE, $infile) or die("Could not open $infile."); $/ = "#>\n"; $\ = "\n"; open(OUTFILE, ">", $outfile) or die("Could not open $outfile."); for $line () { # chomp($line); #split each line into fields and process @Line = split (/\|/, $line); #Check ETYPE and change EOUTCOME if ($Line[2] eq 'INFO') { $Line[5] = "INFO"; } elsif ($Line[2] eq 'ERROR') { $Line[5] = "ERROR"; } #Check EMSG and create new field next to it open CONFIG, $configfile or die "Could not open $configfile... $!"; for $configLine () { chomp($configLine); @configLineItems = split /::/, $configLine; for $checkItem (@configLineItems) { if ("$Line[6]" =~ $checkItem) { $Line[8] = $configLineItems[0]; } else { $Line[8] = "Other Application Event"; } } } #Write output print OUTFILE "|", $Line[1], "|", $Line[2], "|", $Line[3], "|", $Line[4], "|", $Line[5], "|", $Line[6], "|", $Line[8], "|", $Line[7],"|" ; close CONFIG; } close (FILE); close (OUTFILE);