Expanded file pattern source::....(ac|am|cache|clp|com|ec|in|lai|list|m4|os2|pm) into source::.*\.(ac|am|cache|clp|com|ec|in|lai|list|m4|os2|pm)
Expanded file pattern source::....(adb|ads|asm|asp|bas|c|cc|cpp|cs|cxx|f|f77|f90|for|h|hh|hpp|hxx|java|js|jsp|m|nsmap|php|php3|php4|pl|plex|plx|py|pyw|rc|res|soap|sql|xsd|xsl|xslt) into source::.*\.(adb|ads|asm|asp|bas|c|cc|cpp|cs|cxx|f|f77|f90|for|h|hh|hpp|hxx|java|js|jsp|m|nsmap|php|php3|php4|pl|plex|plx|py|pyw|rc|res|soap|sql|xsd|xsl|xslt)
Expanded file pattern source::....(bat|sh|tcl) into source::.*\.(bat|sh|tcl)
Expanded file pattern source::....(jar) into source::.*\.(jar)
Expanded file pattern source::(.../etc/...|....(config|conf|cfg|inii|cfg|emacs|ini|license|lng|plist|presets|properties|props|vim|wsdl)) into source::(.*/etc/.*|.*\.(config|conf|cfg|inii|cfg|emacs|ini|license|lng|plist|presets|properties|props|vim|wsdl))
Expanded file pattern source::....(xml|sgml) into source::.*\.(xml|sgml)
Expanded file pattern source::///etc/shadow* into source::///etc/shadow[^/]*
Expanded file pattern source::....(rtf) into source::.*\.(rtf)
Expanded file pattern source::.../(readme|README)... into source::.*/(readme|README).*
Expanded file pattern source::....(css|htm|html|sgml|shtml|template) into source::.*\.(css|htm|html|sgml|shtml|template)
Expanded file pattern source::....(html?|xsl|css) into source::.*\.(html?|xsl|css)
Expanded file pattern source::...((.(bak|old))|,v|~|#) into source::.*((\.(bak|old))|,v|~|#)
Expanded file pattern source::....(0t|a|ali|asa|au|bmp|cg|cgi|class|d|dat|deb|del|dot|dvi|dylib|elc|eps|exe|ftn|gif|hlp|hqx|hs|icns|ico|inc|iso|jame|jin|jpeg|jpg|kml|la|lhs|lib|lo|lock|mcp|mid|mp3|mpg|msf|nib|o|obj|odt|ogg|ook|opt|os|pal|pbm|pdf|pem|pgm|plo|png|po|pod|pp|ppd|ppm|ppt|prc|ps|psd|psym|pyc|pyd|rast|rb|rde|rdf|rdr|rgb|ro|rpm|rsrc|so|ss|stg|strings|tdt|tif|tiff|tk|uue|vhd|xbm|xlb|xls|xlw) into source::.*\.(0t|a|ali|asa|au|bmp|cg|cgi|class|d|dat|deb|del|dot|dvi|dylib|elc|eps|exe|ftn|gif|hlp|hqx|hs|icns|ico|inc|iso|jame|jin|jpeg|jpg|kml|la|lhs|lib|lo|lock|mcp|mid|mp3|mpg|msf|nib|o|obj|odt|ogg|ook|opt|os|pal|pbm|pdf|pem|pgm|plo|png|po|pod|pp|ppd|ppm|ppt|prc|ps|psd|psym|pyc|pyd|rast|rb|rde|rdf|rdr|rgb|ro|rpm|rsrc|so|ss|stg|strings|tdt|tif|tiff|tk|uue|vhd|xbm|xlb|xls|xlw)
Expanded file pattern source::....(?<!tar.)gz into source::.*\.(?<!tar\.)gz
Expanded file pattern source::....(css|htm|html|sgml|shtml|template) into source::.*\.(css|htm|html|sgml|shtml|template)
Expanded file pattern source::....(jar) into source::.*\.(jar)
Expanded file pattern source::....(tar.gz|tgz) into source::.*\.(tar\.gz|tgz)
Expanded file pattern source::....(tbz|tbz2) into source::.*\.(tbz|tbz2)
Expanded file pattern source::....(|cache|class|cxx|dylib|jar|lo|xslt|md5|rpm|deb|iso|vim) into source::.*\.(|cache|class|cxx|dylib|jar|lo|xslt|md5|rpm|deb|iso|vim)
Expanded file pattern source::....Z into source::.*\.Z
Expanded file pattern source::....bz2? into source::.*\.bz2?
Expanded file pattern source::....crash.log(.\d+)? into source::.*\.crash\.log(\.\d+)?
Expanded file pattern source::....csv into source::.*\.csv
Expanded file pattern source::....tar into source::.*\.tar
Expanded file pattern source::....zip into source::.*\.zip
Expanded file pattern source::.../(apache|httpd).../error* into source::.*/(apache|httpd).*/error[^/]*
Expanded file pattern source::.../(ex|in|nc)(\d{4,8}).log into source::.*/(ex|in|nc)(\d{4,8})\.log
Expanded file pattern source::.../(readme|README)... into source::.*/(readme|README).*
Expanded file pattern source::.../man/man\d+/*.\d+ into source::.*/man/man\d+/[^/]*\.\d+
Expanded file pattern source::.../messages(.\d+)? into source::.*/messages(\.\d+)?
Expanded file pattern source::.../mysql.log(.\d+)? into source::.*/mysql\.log(\.\d+)?
Expanded file pattern source::.../private/var/log/mail.log(.\d+)? into source::.*/private/var/log/mail\.log(\.\d+)?
Expanded file pattern source::.../private/var/log/system.log(.\d+)? into source::.*/private/var/log/system\.log(\.\d+)?
Expanded file pattern source::.../private/var/log/windowserver.log(.\d+)? into source::.*/private/var/log/windowserver\.log(\.\d+)?
Expanded file pattern source::.../procmail(_|.)log into source::.*/procmail(_|\.)log
Expanded file pattern source::.../splunk.help into source::.*/splunk\.help
Expanded file pattern source::.../splunkd.log into source::.*/splunkd\.log
Expanded file pattern source::.../splunkd_std*.log into source::.*/splunkd_std[^/]*\.log
Expanded file pattern source::.../splunklogger.log into source::.*/splunklogger\.log
Expanded file pattern source::.../syslog(.\d+)? into source::.*/syslog(\.\d+)?
Expanded file pattern source::.../var/log/anaconda.log(.\d+)? into source::.*/var/log/anaconda\.log(\.\d+)?
Expanded file pattern source::.../var/log/anaconda.syslog(.\d+)? into source::.*/var/log/anaconda\.syslog(\.\d+)?
Expanded file pattern source::.../var/log/asl.log(.\d+)? into source::.*/var/log/asl\.log(\.\d+)?
Expanded file pattern source::.../var/log/audit/audit.log(.\d+)? into source::.*/var/log/audit/audit\.log(\.\d+)?
Expanded file pattern source::.../var/log/boot.log(.\d+)? into source::.*/var/log/boot\.log(\.\d+)?
Expanded file pattern source::.../var/log/crashreporter.log(.\d+)? into source::.*/var/log/crashreporter\.log(\.\d+)?
Expanded file pattern source::.../var/log/cups/access_log(.\d+)? into source::.*/var/log/cups/access_log(\.\d+)?
Expanded file pattern source::.../var/log/cups/error_log(.\d+)? into source::.*/var/log/cups/error_log(\.\d+)?
Expanded file pattern source::.../var/log/daily.out(.\d+)? into source::.*/var/log/daily\.out(\.\d+)?
Expanded file pattern source::.../var/log/dmesg(.\d+)? into source::.*/var/log/dmesg(\.\d+)?
Expanded file pattern source::.../var/log/ftp.log(.\d+)? into source::.*/var/log/ftp\.log(\.\d+)?
Expanded file pattern source::.../var/log/httpd/error_log(.\d+)? into source::.*/var/log/httpd/error_log(\.\d+)?
Expanded file pattern source::.../var/log/httpd/httpd/ssl_error_log(.\d+)? into source::.*/var/log/httpd/httpd/ssl_error_log(\.\d+)?
Expanded file pattern source::.../var/log/install.log(.\d+)? into source::.*/var/log/install\.log(\.\d+)?
Expanded file pattern source::.../var/log/lastlog(.\d+)? into source::.*/var/log/lastlog(\.\d+)?
Expanded file pattern source::.../var/log/monthly.out(.\d+)? into source::.*/var/log/monthly\.out(\.\d+)?
Expanded file pattern source::.../var/log/rpmpkgs(.\d+)? into source::.*/var/log/rpmpkgs(\.\d+)?
Expanded file pattern source::.../var/log/sa/sar\d+ into source::.*/var/log/sa/sar\d+
Expanded file pattern source::.../var/log/secure(.\d+)? into source::.*/var/log/secure(\.\d+)?
Expanded file pattern source::.../var/log/secure.log(.\d+)? into source::.*/var/log/secure\.log(\.\d+)?
Expanded file pattern source::.../var/log/splunk/DirMon*.log into source::.*/var/log/splunk/DirMon[^/]*\.log
Expanded file pattern source::.../var/log/splunk/dirmon.log into source::.*/var/log/splunk/dirmon\.log
Expanded file pattern source::.../var/log/splunk/searchhistory.log into source::.*/var/log/splunk/searchhistory\.log
Expanded file pattern source::.../var/log/splunk/web_access.log into source::.*/var/log/splunk/web_access\.log
Expanded file pattern source::.../var/log/splunk/web_service.log into source::.*/var/log/splunk/web_service\.log
Expanded file pattern source::.../var/log/spooler(.\d+)? into source::.*/var/log/spooler(\.\d+)?
Expanded file pattern source::.../var/log/weekly.out(.\d+)? into source::.*/var/log/weekly\.out(\.\d+)?
Expanded file pattern source::.../var/log/wtmp(.\d+)? into source::.*/var/log/wtmp(\.\d+)?
Expanded file pattern source::.../web_access.log into source::.*/web_access\.log
Expanded file pattern source::.../web_service.log into source::.*/web_service\.log
Will process: /opt/hdmail/log/pid
Will process: /opt/hdmail/log/web
Will process: /opt/hdmail/log/archived
Will process: /opt/hdmail/log/recovery
Will process: /opt/hdmail/log/completed
Will process: /opt/hdmail/log/tracking
Will process: /opt/hdmail/log/servers
Will process: /opt/hdmail/log/dailyreports
Will process: /opt/hdmail/log/archive
Will process: /opt/hdmail/log/active
Will process: /opt/hdmail/log/completed/test
/opt/hdmail/log/aggregate.2007-11-08.log
        source::/opt/hdmail/log/aggregate.2007-11-08.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-22.log
        source::/opt/hdmail/log/aggregate.2007-10-22.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-23.log
        source::/opt/hdmail/log/aggregate.2007-10-23.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-20.log
        source::/opt/hdmail/log/aggregate.2007-09-20.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-15.log
        source::/opt/hdmail/log/aggregate.2007-11-15.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-17.log
        source::/opt/hdmail/log/aggregate.2007-11-17.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-11.log
        source::/opt/hdmail/log/aggregate.2007-11-11.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-25.log
        source::/opt/hdmail/log/aggregate.2007-11-25.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-22.log
        source::/opt/hdmail/log/aggregate.2007-09-22.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-27.log
        source::/opt/hdmail/log/aggregate.2007-09-27.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-16.log
        source::/opt/hdmail/log/aggregate.2007-09-16.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-03.log
        source::/opt/hdmail/log/aggregate.2007-11-03.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-23.log
        source::/opt/hdmail/log/aggregate.2007-11-23.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-07.log
        source::/opt/hdmail/log/aggregate.2007-10-07.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-09.log
        source::/opt/hdmail/log/aggregate.2007-11-09.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-18.log
        source::/opt/hdmail/log/aggregate.2007-10-18.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-26.log
        source::/opt/hdmail/log/aggregate.2007-11-26.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-06.log
        source::/opt/hdmail/log/aggregate.2007-11-06.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-28.log
        source::/opt/hdmail/log/aggregate.2007-09-28.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-25.log
        source::/opt/hdmail/log/aggregate.2007-10-25.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-14.log
        source::/opt/hdmail/log/aggregate.2007-11-14.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-18.log
        source::/opt/hdmail/log/aggregate.2007-11-18.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-21.log
        source::/opt/hdmail/log/aggregate.2007-10-21.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-13.log
        source::/opt/hdmail/log/aggregate.2007-10-13.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-12.log
        source::/opt/hdmail/log/aggregate.2007-11-12.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-30.log
        source::/opt/hdmail/log/aggregate.2007-09-30.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-07.log
        source::/opt/hdmail/log/aggregate.2007-11-07.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-30.log
        source::/opt/hdmail/log/aggregate.2007-10-30.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-28.log
        source::/opt/hdmail/log/aggregate.2007-10-28.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-24.log
        source::/opt/hdmail/log/aggregate.2007-09-24.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-14.log
        source::/opt/hdmail/log/aggregate.2007-10-14.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-06.log
        source::/opt/hdmail/log/aggregate.2007-10-06.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-19.log
        source::/opt/hdmail/log/aggregate.2007-09-19.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-11.log
        source::/opt/hdmail/log/aggregate.2007-10-11.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-09.log
        source::/opt/hdmail/log/aggregate.2007-10-09.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-29.log
        source::/opt/hdmail/log/aggregate.2007-09-29.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-10.log
        source::/opt/hdmail/log/aggregate.2007-10-10.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-15.log
        source::/opt/hdmail/log/aggregate.2007-09-15.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-24.log
        source::/opt/hdmail/log/aggregate.2007-10-24.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-21.log
        source::/opt/hdmail/log/aggregate.2007-11-21.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-27.log
        source::/opt/hdmail/log/aggregate.2007-11-27.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-26.log
        source::/opt/hdmail/log/aggregate.2007-10-26.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-26.log
        source::/opt/hdmail/log/aggregate.2007-09-26.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-04.log
        source::/opt/hdmail/log/aggregate.2007-11-04.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-23.log
        source::/opt/hdmail/log/aggregate.2007-09-23.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-02.log
        source::/opt/hdmail/log/aggregate.2007-11-02.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-29.log
        source::/opt/hdmail/log/aggregate.2007-10-29.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-31.log
        source::/opt/hdmail/log/aggregate.2007-10-31.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-17.log
        source::/opt/hdmail/log/aggregate.2007-10-17.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-22.log
        source::/opt/hdmail/log/aggregate.2007-11-22.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-19.log
        source::/opt/hdmail/log/aggregate.2007-10-19.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-09-25.log
        source::/opt/hdmail/log/aggregate.2007-09-25.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-28.log
        source::/opt/hdmail/log/aggregate.2007-11-28.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-13.log
        source::/opt/hdmail/log/aggregate.2007-11-13.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-01.log
        source::/opt/hdmail/log/aggregate.2007-11-01.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-05.log
        source::/opt/hdmail/log/aggregate.2007-10-05.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-24.log
        source::/opt/hdmail/log/aggregate.2007-11-24.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-05.log
        source::/opt/hdmail/log/aggregate.2007-11-05.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-19.log
        source::/opt/hdmail/log/aggregate.2007-11-19.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-20.log
        source::/opt/hdmail/log/aggregate.2007-11-20.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-27.log
        source::/opt/hdmail/log/aggregate.2007-10-27.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-16.log
        source::/opt/hdmail/log/aggregate.2007-11-16.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-11-10.log
        source::/opt/hdmail/log/aggregate.2007-11-10.log
        sourcetype::strongmail
        host::mail01

/opt/hdmail/log/aggregate.2007-10-20.log
        source::/opt/hdmail/log/aggregate.2007-10-20.log
        sourcetype::strongmail
        host::mail01

/opt/splunk/var/log/splunk/metrics.log
        source::/opt/splunk/var/log/splunk/metrics.log
        sourcetype::splunkd
        host::mail01

/opt/splunk/var/log/splunk/searchhistory.log
        source::/opt/splunk/var/log/splunk/searchhistory.log
        sourcetype::splunk_search_history
        host::mail01

/opt/splunk/var/log/splunk/splunkd.log
        source::/opt/splunk/var/log/splunk/splunkd.log
        sourcetype::splunkd
        host::mail01

/opt/splunk/var/log/splunk/splunklogger.log
        source::/opt/splunk/var/log/splunk/splunklogger.log
        sourcetype::splunklogger
        host::mail01

/opt/splunk/var/log/splunk/web_access.log
        source::/opt/splunk/var/log/splunk/web_access.log
        sourcetype::splunk_web_access
        host::mail01

/opt/splunk/var/log/splunk/web_service.log
        source::/opt/splunk/var/log/splunk/web_service.log
        sourcetype::splunk_web_service
        host::mail01

/var/log/messages
        source::/var/log/messages
        sourcetype::linux_messages_syslog
        host::mail01

/var/log/secure
        source::/var/log/secure
        sourcetype::linux_secure
        host::mail01
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Using logging configuration at /opt/splunk/etc/log-cmdline.cfg.
PROPERTIES OF /opt/hdmail/log/strongmail-success.log.processed
        Attr:AUTO_LINEMERGE     False
        Attr:BREAK_ONLY_BEFORE
        Attr:BREAK_ONLY_BEFORE_DATE     True
        Attr:CHARSET    UTF-8
        Attr:DATETIME_CONFIG    /etc/datetime.xml
        Attr:MAX_DAYS_AGO       1000
        Attr:MAX_DAYS_HENCE     2
        Attr:MAX_EVENTS 256
        Attr:MAX_TIMESTAMP_LOOKAHEAD    128
        Attr:MUST_BREAK_AFTER
        Attr:MUST_NOT_BREAK_AFTER
        Attr:MUST_NOT_BREAK_BEFORE
        Attr:SEGMENTATION       default
        Attr:SEGMENTATION-all   full
        Attr:SEGMENTATION-inner inner
        Attr:SEGMENTATION-outer outer
        Attr:SEGMENTATION-raw   none
        Attr:SEGMENTATION-standard      standard
        Attr:SHOULD_LINEMERGE   False
        Attr:TRANSFORMS
        Attr:TRUNCATE   10000
        Attr:_actions   new,edit,delete
        Attr:_raw       SHOULD_LINEMERGE = False
given_type = strongmail
is_valid = True
sourcetype = unknown

        Attr:given_type strongmail
        Attr:is_valid   True
        Attr:maxDist    300
        Attr:sourcetype _processed