From 1333e616c49c1f2cf8400ad851035cb1b503f572 Mon Sep 17 00:00:00 2001
From: hetile-ssense <eric.st-amand@ssense.com>
Date: Mon, 2 Oct 2017 12:33:41 -0400
Subject: [PATCH] conf: parser: improve mongodb parser (#390)

- Fix field naming (context<->component)
- Add an optional "ms" field that will be the Microseconds the query took to execute (won't be there is it's not a COMMAND)
---
 conf/parsers.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/parsers.conf b/conf/parsers.conf
index 031be7955c0..2620cbbe585 100644
--- a/conf/parsers.conf
+++ b/conf/parsers.conf
@@ -65,7 +65,7 @@
 [PARSER]
     Name    mongodb
     Format  regex
-    Regex   ^(?<time>[^ ]*)\s+(?<severity>\w)\s+(?<context>[^ ]+)\s+\[(?<connection>[^\]]+)]\s+(?<message>.*)$
+    Regex   ^(?<time>[^ ]*)\s+(?<severity>\w)\s+(?<component>[^ ]+)\s+\[(?<context>[^\]]+)]\s+(?<message>.*?) *(?<ms>(\d+))?(:?ms)?$
     Time_Format %Y-%m-%dT%H:%M:%S.%L
     Time_Keep   On
     Time_Key time