syslog

package com.ces.syslog;

import java.io.IOException;
import java.io.ObjectInputStream;
import java.io.ObjectOutputStream;
import java.lang.reflect.Field;
import java.net.Socket;
import java.net.UnknownHostException;
import java.util.ArrayList;
import java.util.List;
import java.util.Map;

import com.ces.zwww.entity.SafetyAlarm;
import com.ces.zwww.utils.ZwwwConst;

/**
* syslog socket客户端
*
* @author Jusin
*
*/
public  class SyslogClient {

/**
* 以下变量形成配置文件
*/
private static String host = "218.242.122.196";
private String startCMD = "working";
private static int port = 20012;

private int timeout = 30*1000;
private int waitTimeout = 10*1000;

Socket client = null;
private static ObjectOutputStream out;
private static ObjectInputStream in;

public Object getSyslogMsg(){
Object message = null;
try {
Socket client = new Socket(host, port);
System.out.println("start:");
in = new ObjectInputStream(client.getInputStream());
out = new ObjectOutputStream(client.getOutputStream());
try {
message = in.readObject();

return message;
} catch (ClassNotFoundException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
} catch (UnknownHostException e) {
// TODO Auto-generated catch block
e.printStackTrace();
} catch (IOException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
return null;
}

public static void main(String[] args){
try {

List<SafetyAlarm> list = new ArrayList<SafetyAlarm>();
Socket client = new Socket(host, port);
System.out.println("start:");
//objectoutstream
in = new ObjectInputStream(client.getInputStream());
out = new ObjectOutputStream(client.getOutputStream());

System.out.println(System.currentTimeMillis());
Object message = null;
try {
message = in.readObject();
if (message instanceof Map) {
Map<String, String> map = (Map<String, String>) message;
System.out.println("client receive message is：" + map);
} else if(message instanceof List) {
//一个map装一个对象，这样就可以用另外一个map转化,接口中不同的属性名。
List<Map<String, Object>> messageList = (List<Map<String, Object>>) message;
if(messageList != null && messageList.size()>0){
for(Map<String, Object> m : messageList){
SafetyAlarm sa = new SafetyAlarm();
//m.entrySet()把map的键值对变为list
for (Map.Entry<String, Object> entry : m.entrySet()) {// 组装参数
String fieldKey = ZwwwConst.getSyslogFieldMap().get(entry.getKey());
setField(sa, fieldKey, entry.getValue());
}
list.add(sa);
}
}
} else {
System.out.println("The type of the message is not map!");
}
} catch(Exception e){
e.printStackTrace();
//this.clientStart();
}


} catch (UnknownHostException e) {
// TODO Auto-generated catch block
e.printStackTrace();
} catch (IOException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}

//属性设值
@SuppressWarnings("rawtypes")
private static void setField(Object bean,String fieldKey,Object fieldValue){
try {
Field field = bean.getClass().getDeclaredField(fieldKey);
field.setAccessible(true);
field.set(bean, fieldValue);
} catch (SecurityException e) {
e.printStackTrace();
} catch (IllegalArgumentException e) {
e.printStackTrace();
} catch (NoSuchFieldException e) {
e.printStackTrace();
} catch (IllegalAccessException e) {
e.printStackTrace();
}
}
/**
* socket的核心区域
*
* @throws IOException
* @throws InterruptedException
*/
private void socket() throws IOException, InterruptedException {
this.client = getSocketClient();
this.client.setSoTimeout(timeout);
out = new ObjectOutputStream(client.getOutputStream());
in = new ObjectInputStream(client.getInputStream());
out.writeObject(startCMD);
out.flush();
while (true) {
Object message = null;
try {
message = in.readObject();
//this.receiveMsg(message);
} catch(Exception e){
e.printStackTrace();
this.clientStart();
}
}
}

/**
* 获取socket客户端
*
* @param client
* @return
* @throws InterruptedException
*/
private Socket getSocketClient() throws InterruptedException {
Socket client = null;
while (true) {
try {
client = new Socket(host, port);
} catch (UnknownHostException e1) {
System.out.println("socket服务器IP或端口无法识别，有可能配置错误，请检查");
e1.printStackTrace();
Thread.sleep(waitTimeout);// 当链接失败的时候，等待60秒再连接一次
continue;
} catch (IOException e1) {
e1.printStackTrace();
Thread.sleep(waitTimeout);// 当链接失败的时候，等待60秒再连接一次
continue;
} finally {
if (client != null&&!client.isConnected()) {
try {
client.close();
} catch (IOException e) {
e.printStackTrace();
}
client = null;
}
}
break;
}
return client;
}

public void clientStart() throws InterruptedException {
while (true) {
try {
this.socket();
} catch (IOException e) {
e.printStackTrace();
continue;
}
}
}

}



package com.ces.syslog;

import java.io.IOException;
import java.io.ObjectInputStream;
import java.io.ObjectOutputStream;
import java.net.ServerSocket;
import java.net.Socket;
import java.net.UnknownHostException;
import java.util.HashMap;
import java.util.Map;

public class SyslogServer {

private ServerSocket ss;
private Socket socket;
private ObjectInputStream in;
private ObjectOutputStream out;
private int port = 6688;

public void start() throws ClassNotFoundException, InterruptedException {
while (true) {
try {
ss = new ServerSocket(port);
System.out.println("端口号：" + port + " socket服务启动成功！");
socket = ss.accept();
in = new ObjectInputStream(socket.getInputStream());
out = new ObjectOutputStream(socket.getOutputStream());

while (true) {
Object obj = in.readObject();
String line = null;
if (obj instanceof String) {
line = (String) obj;
}
System.out.println("you input is : " + obj);
if ("working".equals(line)) {
int count = 0;
while (true) {
for (int i = 0; i < 10; i++) {
Map<String, String> map = new HashMap<String, String>();
map.put("START_TIME", "2009-11-20 00:00:00");
map.put("END_TIME", "2009-11-20 00:00:00");
map.put("SRC_ADDRESS", "192.168.1.1");
map.put("SRC_PORT", "2322");
map.put("DEST_ADDRESS", "192.168.1.2");
map.put("DEST_PORT", "80");
map.put("DVC_EVENT_CATEGORY", "扫描");
map.put("MESSAGE", "发现端口扫描");
out.writeObject(map);
out.flush();
count++;
System.out.println(count + "服务端发送消息："
+ map.toString());
}
Thread.sleep(10000);
}
}
}
} catch (Exception e) {
continue;
} finally {
try {
if (in != null)
in.close();
} catch (IOException e) {
e.printStackTrace();
}
try {
if (out != null)
out.close();
} catch (IOException e) {
e.printStackTrace();
}
try {
if (socket != null)
socket.close();
} catch (IOException e) {
e.printStackTrace();
}
try {
if (ss != null)
ss.close();
} catch (IOException e) {
e.printStackTrace();
}
}
}
}

/*
* Socket socketConnection = new Socket(InetAddress.getLocalHost(), 6688);
* // 使用ObjectOutputStream和ObjectInputStream进行对象数据传输 ObjectOutputStream out
* = new ObjectOutputStream( socketConnection.getOutputStream());
* ObjectInputStream ins = new ObjectInputStream(
* socketConnection.getInputStream()); List<Map<String, Object>> radlist =
* (List<Map<String, Object>>) ins .readObject();
*/

public static void main(String[] args) throws UnknownHostException,
IOException, ClassNotFoundException, InterruptedException {
SyslogServer server = new SyslogServer();
server.start();

}
}






package com.ces.zwww.utils;

import java.util.HashMap;
import java.util.Map;

public class ZwwwConst {

public static final String HIGHCHARTS_COLORS[] = {"#8085e9","#7cb5ec","#90ed7d","#f7a35c","#434348","#f15c80","#e4d354","#8085e8","#8d4653","#91e8e1"};

public static final String TOPSEC_ASSET_PARAM = "<?xml version=\"1.0\" encoding=\"UTF-8\"?><topsec><mode>asset_list</mode></topsec>";

public static final String ITSM_TICKETS = "<?xml version=\"1.0\" encoding=\"UTF-8\"?><itsm><mode>tickets</mode></itsm>";

private static Map<String,String> syslogFieldMap = new HashMap<String,String>();

public static Map<String,String> getSyslogFieldMap() {
if(syslogFieldMap.isEmpty()){
syslogFieldMap.put("EVENT_ID","eventId");
syslogFieldMap.put("NAME","name");
syslogFieldMap.put("START_TIME","startTime");
syslogFieldMap.put("CUSTOMER","customer");
syslogFieldMap.put("EXTERNAL_ID","externalId");
syslogFieldMap.put("APP_PROTOCOL","appProtocol");
syslogFieldMap.put("END_TIME","endTime");
syslogFieldMap.put("EVENT_TYPE","eventType");
syslogFieldMap.put("DURATION","duration");
syslogFieldMap.put("CAT1_ID","cat1Id");
syslogFieldMap.put("CAT2_ID","cat2Id");
syslogFieldMap.put("CAT3_ID","cat3Id");
syslogFieldMap.put("CAT4_ID","cat4Id");
syslogFieldMap.put("PRIORITY","priority");
syslogFieldMap.put("MSG_ID","msgId");
syslogFieldMap.put("MESSAGE","message");
syslogFieldMap.put("BYTES_IN","bytesIn");
syslogFieldMap.put("BYTES_OUT","bytesOut");
syslogFieldMap.put("PACKETS_IN","packetsIn");
syslogFieldMap.put("PACKETS_OUT","packetsOut");
syslogFieldMap.put("BASE_EVENT_COUNT","baseEventCount");
syslogFieldMap.put("GENERATOR","generator");
syslogFieldMap.put("RAW_EVENT","rawEvent");
syslogFieldMap.put("TRANS_PROTOCOL","transProtocol");
syslogFieldMap.put("SESSION_ID","sessionId");
syslogFieldMap.put("CRYPTO_SIGNATURE","cryptoSignature");
syslogFieldMap.put("SEVERITY","severity");
syslogFieldMap.put("ORIGINATOR","originator");
syslogFieldMap.put("UUID","uuid");
syslogFieldMap.put("RESPONDS","responds");
syslogFieldMap.put("AUTH","auth");
syslogFieldMap.put("ORGANIZE","organize");
syslogFieldMap.put("OBJECT_ID","objectId");
syslogFieldMap.put("OBJECT_PARAM","objectParam");
syslogFieldMap.put("SIM_RULE","simRule");
syslogFieldMap.put("RESULT","result");
syslogFieldMap.put("SIGNATURE","signature");
syslogFieldMap.put("VULNERABILITY","vulnerability");
syslogFieldMap.put("CVE","cve");
syslogFieldMap.put("BID","bid");
syslogFieldMap.put("SOLUTION","solution");
syslogFieldMap.put("RISK_FACTOR","riskFactor");
syslogFieldMap.put("RELATED_VULN_TYPE","relatedVulnType");
syslogFieldMap.put("RELATED_VULN","relatedVuln");
syslogFieldMap.put("DB_NAME","dbName");
syslogFieldMap.put("TABLE_NAME","tableName");
syslogFieldMap.put("DB_CMD","dbCmd");
syslogFieldMap.put("DB_CONTENT","dbContent");
syslogFieldMap.put("SQL_KEY","sqlKey");
syslogFieldMap.put("FLAG","flag");
syslogFieldMap.put("REASON","reason");
syslogFieldMap.put("PARENTID","parentid");
syslogFieldMap.put("CONNID","connid");
syslogFieldMap.put("POLICY","policy");
syslogFieldMap.put("NATID","natid");
syslogFieldMap.put("FWRULE","fwrule");
syslogFieldMap.put("SA","sa");
syslogFieldMap.put("SN","sn");
syslogFieldMap.put("ROLES","roles");
syslogFieldMap.put("CLIENTEVENT","clientevent");
syslogFieldMap.put("SCMEVENT","scmevent");
syslogFieldMap.put("LEFTCLIENT","leftclient");
syslogFieldMap.put("RIGHTCLIENT","rightclient");
syslogFieldMap.put("TUNNELEVENT","tunnelevent");
syslogFieldMap.put("CHECKED","checked");
syslogFieldMap.put("NAV_VIRUS","navVirus");
syslogFieldMap.put("NAV_SCAN_TYPE","navScanType");
syslogFieldMap.put("NAV_VIRUS_LOCATION","navVirusLocation");
syslogFieldMap.put("NAV_PRIMARY_ACTION","navPrimaryAction");
syslogFieldMap.put("NAV_SENDARY_ACTION","navSendaryAction");
syslogFieldMap.put("OP","op");
syslogFieldMap.put("NORMAL_OBJECT","normalObject");
syslogFieldMap.put("VIRUS_OBJECT","virusObject");
syslogFieldMap.put("INT_PATH_INFO","intPathInfo");
syslogFieldMap.put("SENDER","sender");
syslogFieldMap.put("RECEIVER","receiver");
syslogFieldMap.put("SUBJECT","subject");
syslogFieldMap.put("RELAYER","relayer");
syslogFieldMap.put("MANAGER_ID","managerId");
syslogFieldMap.put("MANAGER_RECEIPT_TIME","managerReceiptTime");
syslogFieldMap.put("AGT_DOMAIN_ID","agtDomainId");
syslogFieldMap.put("AGT_TIER_ID","agtTierId");
syslogFieldMap.put("AGT_ADDRESS","agtAddress");
syslogFieldMap.put("AGT_DESCRIPTOR_ID","agtDescriptorId");
syslogFieldMap.put("AGT_RECEIPT_TIME","agtReceiptTime");
syslogFieldMap.put("AGT_SEVERITY","agtSeverity");
syslogFieldMap.put("DVC_ADDRESS","dvcAddress");
syslogFieldMap.put("DVC_PORT","dvcPort");
syslogFieldMap.put("DVC_NAME","dvcName");
syslogFieldMap.put("DVC_MAC_ADDRESS","dvcMacAddress");
syslogFieldMap.put("DVC_DESCRIPTOR_ID","dvcDescriptorId");
syslogFieldMap.put("DVC_EVENT_CATEGORY","dvcEventCategory");
syslogFieldMap.put("DVC_EVENT_CATEGORY2","dvcEventCategory2");
syslogFieldMap.put("DVC_EVENT_CATEGORY3","dvcEventCategory3");
syslogFieldMap.put("DVC_EVENT_CLASS_ID","dvcEventClassId");
syslogFieldMap.put("DVC_TYPE","dvcType");
syslogFieldMap.put("DVC_SEVERITY","dvcSeverity");
syslogFieldMap.put("DVC_FACILITY","dvcFacility");
syslogFieldMap.put("DVC_INBOUND_INTERFACE","dvcInboundInterface");
syslogFieldMap.put("DVC_OUTBOUND_INTERFACE","dvcOutboundInterface");
syslogFieldMap.put("DVC_PRODUCT","dvcProduct");
syslogFieldMap.put("DVC_RECEIPT_TIME","dvcReceiptTime");
syslogFieldMap.put("DVC_DOMAIN","dvcDomain");
syslogFieldMap.put("DVC_VENDOR","dvcVendor");
syslogFieldMap.put("DVC_DIRECTION","dvcDirection");
syslogFieldMap.put("DVC_PAYLOAD_ID","dvcPayloadId");
syslogFieldMap.put("DVC_PROCESS_NAME","dvcProcessName");
syslogFieldMap.put("DVC_ZONE","dvcZone");
syslogFieldMap.put("DVC_TRANS_ADDRESS","dvcTransAddress");
syslogFieldMap.put("DEV_TRANS_PORT","devTransPort");
syslogFieldMap.put("DVC_TRANS_ZONE","dvcTransZone");
syslogFieldMap.put("DVC_ASSET_ID","dvcAssetId");
syslogFieldMap.put("DVC_VLAN_NAME","dvcVlanName");
syslogFieldMap.put("DVC_VLAN_NUM","dvcVlanNum");
syslogFieldMap.put("DVC_CUSTOM_STRING1","dvcCustomString1");
syslogFieldMap.put("DVC_CUSTOM_STRING2","dvcCustomString2");
syslogFieldMap.put("DVC_CUSTOM_STRING3","dvcCustomString3");
syslogFieldMap.put("DVC_CUSTOM_STRING4","dvcCustomString4");
syslogFieldMap.put("DVC_CUSTOM_STRING5","dvcCustomString5");
syslogFieldMap.put("DVC_CUSTOM_STRING6","dvcCustomString6");
syslogFieldMap.put("DVC_CUSTOM_NUMBER1","dvcCustomNumber1");
syslogFieldMap.put("DVC_CUSTOM_NUMBER2","dvcCustomNumber2");
syslogFieldMap.put("DVC_CUSTOM_NUMBER3","dvcCustomNumber3");
syslogFieldMap.put("DVC_CUSTOM_Date1","dvcCustomDate1");
syslogFieldMap.put("DVC_CUSTOM_Date2","dvcCustomDate2");
syslogFieldMap.put("FILE_NAME","fileName");
syslogFieldMap.put("FILE_PATH","filePath");
syslogFieldMap.put("FILE_ID","fileId");
syslogFieldMap.put("FILE_TYPE","fileType");
syslogFieldMap.put("FILE_SIZE","fileSize");
syslogFieldMap.put("FILE_CREATE_TIME","fileCreateTime");
syslogFieldMap.put("FILE_MODIFICATION_TIME","fileModificationTime");
syslogFieldMap.put("FILE_PERMISSION","filePermission");
syslogFieldMap.put("FILE_HASH","fileHash");
syslogFieldMap.put("OLD_FILE_NAME","oldFileName");
syslogFieldMap.put("OLD_FILE_PATH","oldFilePath");
syslogFieldMap.put("OLD_FILE_ID","oldFileId");
syslogFieldMap.put("OLD_FILE_TYPE","oldFileType");
syslogFieldMap.put("OLD_FILE_SIZE","oldFileSize");
syslogFieldMap.put("OLD_FILE_CREATE_TIME","oldFileCreateTime");
syslogFieldMap.put("OLD_FILE_MODIFICATION_TIME","oldFileModificationTime");
syslogFieldMap.put("OLD_FILE_PERMISSION","oldFilePermission");
syslogFieldMap.put("OLD_FILE_HASH","oldFileHash");
syslogFieldMap.put("REQUEST_URL","requestUrl");
syslogFieldMap.put("REQUEST_METHOD","requestMethod");
syslogFieldMap.put("USERAGENT","useragent");
syslogFieldMap.put("REFERER","referer");
syslogFieldMap.put("REQUEST_STATUS","requestStatus");
syslogFieldMap.put("REQUEST_CONTEXT","requestContext");
syslogFieldMap.put("REQUEST_CLIENT_APPLICATION","requestClientApplication");
syslogFieldMap.put("REQUEST_COOKIES","requestCookies");
syslogFieldMap.put("REQUEST_OBJECT","requestObject");
syslogFieldMap.put("REQUEST_DOMAIN","requestDomain");
syslogFieldMap.put("DEST_ADDRESS","destAddress");
syslogFieldMap.put("DEST_PORT","destPort");
syslogFieldMap.put("DEST_HOST_NAME","destHostName");
syslogFieldMap.put("DEST_DNS_DOMAIN","destDnsDomain");
syslogFieldMap.put("DEST_NT_DOMAIN","destNtDomain");
syslogFieldMap.put("DEST_MAC_ADDRESS","destMacAddress");
syslogFieldMap.put("DEST_PROCESS_NAME","destProcessName");
syslogFieldMap.put("DEST_SERVICE_NAME","destServiceName");
syslogFieldMap.put("DEST_TRANS_ADDRESS","destTransAddress");
syslogFieldMap.put("DEST_TRANS_PORT","destTransPort");
syslogFieldMap.put("DEST_TRANS_ZONE","destTransZone");
syslogFieldMap.put("DEST_ZONE","destZone");
syslogFieldMap.put("DEST_USER_PRIVILEGES","destUserPrivileges");
syslogFieldMap.put("DEST_USER_NAME","destUserName");
syslogFieldMap.put("DEST_USER_ID","destUserId");
syslogFieldMap.put("DEST_ASSET_ID","destAssetId");
syslogFieldMap.put("DEST_GEO_ID","destGeoId");
syslogFieldMap.put("DEST_MAP_ADDRESS","destMapAddress");
syslogFieldMap.put("DEST_MAP_PORT","destMapPort");
syslogFieldMap.put("DEST_VLAN_NAME","destVlanName");
syslogFieldMap.put("DEST_VLAN_NUM","destVlanNum");
syslogFieldMap.put("SRC_ADDRESS","srcAddress");
syslogFieldMap.put("SRC_PORT","srcPort");
syslogFieldMap.put("SRC_HOST_NAME","srcHostName");
syslogFieldMap.put("SRC_DNS_DOMAIN","srcDnsDomain");
syslogFieldMap.put("SRC_NT_DOMAIN","srcNtDomain");
syslogFieldMap.put("SRC_MAC_ADDRESS","srcMacAddress");
syslogFieldMap.put("SRC_PROCESS_NAME","srcProcessName");
syslogFieldMap.put("SRC_SERVICE_NAME","srcServiceName");
syslogFieldMap.put("SRC_TRANS_ADDRESS","srcTransAddress");
syslogFieldMap.put("SRC_TRANS_PORT","srcTransPort");
syslogFieldMap.put("SRC_TRANS_ZONE","srcTransZone");
syslogFieldMap.put("SRC_ZONE","srcZone");
syslogFieldMap.put("SRC_USER_PRIVILEGES","srcUserPrivileges");
syslogFieldMap.put("SRC_USER_NAME","srcUserName");
syslogFieldMap.put("SRC_USER_ID","srcUserId");
syslogFieldMap.put("SRC_ASSET_ID","srcAssetId");
syslogFieldMap.put("SRC_GEO_ID","srcGeoId");
syslogFieldMap.put("SRC_VLAN_NAME","srcVlanName");
syslogFieldMap.put("SRC_VLAN_NUM","SRCVLANNUM");
syslogFieldMap.put("FLEX_NUMBER1","flexNumber1");
syslogFieldMap.put("FLEX_NUMBER1_LABEL","flexNumber1Label");
syslogFieldMap.put("FLEX_NUMBER2","flexNumber2");
syslogFieldMap.put("FLEX_NUMBER2_LABEL","flexNumber2Label");
syslogFieldMap.put("FLEX_STRING1","flexString1");
syslogFieldMap.put("FLEX_STRING1_LABEL","flexString1Label");
syslogFieldMap.put("FLEX_STRING2","flexString2");
syslogFieldMap.put("FLEX_STRING2_LABEL","flexString2Label");
syslogFieldMap.put("FLEX_Date1","flexDate1");
syslogFieldMap.put("FLEX_Date1_LABEL","flexDate1Label");
syslogFieldMap.put("LBL_DESCRIPTOR_ID","lblDescriptorId");
syslogFieldMap.put("CUSTOM1","custom1");
syslogFieldMap.put("CUSTOM2","custom2");
syslogFieldMap.put("CUSTOM3","custom3");
syslogFieldMap.put("CUSTOM4","custom4");
syslogFieldMap.put("CUSTOM5","custom5");
syslogFieldMap.put("CUSTOM6","custom6");
syslogFieldMap.put("CUSTOM7","custom7");
syslogFieldMap.put("CUSTOM8","custom8");
syslogFieldMap.put("CUSTOM_INTEGER1","customInteger1");
syslogFieldMap.put("CUSTOM_INTEGER2","customInteger2");
syslogFieldMap.put("CUSTOM_INTEGER3","customInteger3");
syslogFieldMap.put("CUSTOM_INTEGER4","customInteger4");
syslogFieldMap.put("CUSTOM_INTEGER5","customInteger5");
syslogFieldMap.put("CUSTOM_INTEGER6","customInteger6");
syslogFieldMap.put("CUSTOM_INTEGER7","customInteger7");
syslogFieldMap.put("CUSTOM_INTEGER8","customInteger8");
syslogFieldMap.put("CUSTOM_LONG1","customLong1");
syslogFieldMap.put("CUSTOM_LONG2","customLong2");
syslogFieldMap.put("CUSTOM_LONG3","customLong3");
syslogFieldMap.put("CUSTOM_LONG4","customLong4");
syslogFieldMap.put("CUSTOM_LONG5","customLong5");
syslogFieldMap.put("CUSTOM_LONG6","customLong6");
syslogFieldMap.put("CUSTOM_LONG7","customLong7");
syslogFieldMap.put("CUSTOM_LONG8","customLong8");
syslogFieldMap.put("TABLE_SPACE","tableSpace");
syslogFieldMap.put("FILE_SYSTEM","fileSystem");
syslogFieldMap.put("STATUS","status");
syslogFieldMap.put("CAPABILITY","capability");
syslogFieldMap.put("USED","used");
syslogFieldMap.put("AVAILABLE","available");
syslogFieldMap.put("AC_PERCENT","acPercent");
syslogFieldMap.put("UC_PERCENT","ucPercent");
syslogFieldMap.put("MIN_VALUE","minValue");
syslogFieldMap.put("AVG_VALUE","avgValue");
syslogFieldMap.put("MAX_VALUE","maxValue");
syslogFieldMap.put("CPU_USED_PERCENT","cpuUsedPercent");
syslogFieldMap.put("MEM_USED_PERCENT","memUsedPercent");
syslogFieldMap.put("DISK_USED_PERCENT","diskUsedPercent");
syslogFieldMap.put("SESSION_COUNT","sessionCount");
syslogFieldMap.put("SESSION_PERCENT","sessionPercent");
}
return syslogFieldMap;
}
}