Another log format

[emeidi]

Great tool, saved me a lot of work — thank you very much :-)

Just one major issue: My bind9

ii  bind9                                1:9.10.3.dfsg.P4-12.3+deb9u4      amd64        Internet Domain Name Server

produces the following log format:

24-Jul-2018 00:18:25.616 queries: info: client 1.2.3.4#58923 (emeidi.com): query: emeidi.com IN A +E (1.2.3.5)

The following regex matches this kind of query log entry:

regexp_emeidi = /^(\d{2}-\w{3}-\d{4}\s+\d{2}:\d{2}:\d{2}\.\d{3})\s+queries:\sinfo:\sclient\s+(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})#\d+\s+\(.+\):\s+query:\s+(.*)\s+IN\s+(\w+)\s+\+\w*\s+\((\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})\)$/

I had to manually patch base.rb to make it work.