add parser-specific docs & rewrite sudo parser for journald

diff --git a/logparse/config.py b/logparse/config.py
index df81c4e60448e36e289f507809cdd2d0c61bd609..bcdc8b266722bbdc23ebf6da45639ceba5665bc4 100644 (file)
--- a/logparse/config.py
+++ b/logparse/config.py
@@ -34,7 +34,8 @@ defaults = {
             'quiet': False,
             'hostname-path': '/etc/hostname',
             'parsers': '',
-            'ignore-parsers': ''
+            'ignore-parsers': '',
+            'period': '1 minute'
         },
         'html': {
             'header':  '/etc/logparse/header.html',
@@ -51,6 +52,7 @@ defaults = {
             'cron': '/var/log/cron.log',
             'cpuinfo': '/proc/cpuinfo',
             'meminfo': '/proc/meminfo',
+            'uptime': '/proc/uptime',
             'sys': '/var/log/syslog',
             'smbd': '/var/log/samba',
             'zfs': '/var/log/zpool.log',
@@ -59,6 +61,9 @@ defaults = {
             'httpd-access': '/var/log/apache2/access.log',
             'httpd-error': '/var/log/apache2/error.log'
         },
+        'cron': {
+            'period': ''
+        },
         'mail': {
             'to': '',
             'from': '',
@@ -72,19 +77,39 @@ defaults = {
             'timeout': 10,
             'port': 7634,
             'show-model': False, 
+            'period': ''
         },
         'sshd': {
-            'sshd-resolve-domains': ''
+            'sshd-resolve-domains': '',
+            'period': ''
         },
         'smbd': {
-            'smbd-resolve-domains': ''
+            'shares': '^((?!IPC\$).)*$',
+            'users': '.*',
+            'smbd-resolve-domains': '',
+            'period': ''
         },
         'httpd': {
-            'httpd-resolve-domains': ''
+            'httpd-resolve-domains': '',
+            'period': ''
         },
         'du': {
             'paths': ['/', '/etc', '/home'],
             'force-write': False
+        },
+        'ufw': {
+            'ufw-resolve-domains': '',
+            'period': ''
+        },
+        'sudo': {
+            'period': '',
+            'list-users': True,
+            'summary': True,
+            'truncate-commands': True
+        },
+        'systemctl': {
+            'period': '',
+            'show-all': True
         }
 }