@@ -46,7 +46,7 @@ will be parsed as
4646```
4747
4848####NOTE
49- * if the key is not quotted and pair_delimiter occures in key,plugin will handle it.
49+ * if the key is not in quotes and pair_delimiter occures in key,plugin will handle it.
5050
5151 eg:
5252
@@ -58,7 +58,7 @@ will be parsed as
5858 ``` json
5959 {"devname" :" FT6H" , "duration" :" 194" ,"service" :" http" ,"src zone" :" Trust" ,"policy_id" :" 194" }
6060 ```
61- * But if value is not quoted, you should use optional parameter * 'adjustment_rules'* to correct parsing.
61+ * But if value is not quoted, you should use optional parameter * 'adjustment_rules'* to correct the parsing.
6262
6363## Option Parameters
6464
@@ -80,11 +80,11 @@ will be parsed as
8080
8181 eg:
8282
83- noramlly following logs,
83+ normally following logs,
8484
85- ` devname=FT6H ` ** ` service=http ` ** ` proto=6 src zone=Trust dst zone=Untrust `
85+ ` devname=FT6H ` ** ` service=http ` ** ` proto=6 src zone=Trust dst zone=Untrust `
8686
87- ` devname=FT6H ` ** ` service=NETBIOS (NS) ` ** ` proto=17 src zone=Trust dst zone=Untrust `
87+ ` devname=FT6H ` ** ` service=NETBIOS (NS) ` ** ` proto=17 src zone=Trust dst zone=Untrust `
8888
8989 will be parse as
9090
@@ -95,9 +95,9 @@ will be parsed as
9595 ```
9696 in second case where key * "service"* only received first part of its value, becouse value not quoted and delimiter(here space) occured in value.
9797
98- Also next key * "proto"* is wrongly taken as "(NS) proto".
98+ Also next key * "proto"* is wrongly taken as * "(NS) proto"* .
9999
100- to overcome these problem we can use,
100+ to overcome this problem we can use,
101101
102102 ` adjustment_rules {"service":"NETBIOS \\(.*\\)"} ` in configuration.
103103
0 commit comments