colortail config

COLOR magenta
{
# matches the date
^(... ..).*$
}

COLOR cyan
{
# matches the time
^... .. (..:..:..).*$
# matches the word INFO
^.*(INFO|info).*$
}

COLOR green
{
# matches the hostname
^... .. ..:..:.. ([^ ]+).*$
}

COLOR yellow
{
# matches the "program" that wrote to syslog
^... .. ..:..:.. [^ ]+ ([^ ]+)
}

COLOR brightyellow
{
# matches all ip adresses
^.*([0-9]{3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*$
^.*([0-9]{2}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*$
^.*([0-9]{1}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*$
# matches two ip adresses in one line
^.*([0-9]{3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*([0-9]{3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*$
^.*([0-9]{2}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*([0-9]{2}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*$
^.*([0-9]{1}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*([0-9]{1}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}){1}([:][0-9][0-9][0-9][0-9][0-9]?).*$
# matches the word WARNING
^.*(WARNING|warning|WARN).*$
}

COLOR brightred
{
# matches the word root
^.*(root).*$
# matches DENY
^.*(ppp-in DENY ppp0).*$
^.*(eth-in DENY eth0).*$
# matches the word ERROR
^(ERROR|error|err).*$
^.*(ERROR|error|err).*$
}

COLOR brightblue
{
# matches the output from the "program"
^... .. ..:..:.. [^ ]+ [^ ]+ (.*)
# matches the time
^.*([0-9]{2}:[0-9]{2}:[0-9]{2}).*$
}