{
  "regex": "^<(\\S+)>(\\S+\\s+\\S+\\s+\\d+:\\d+:\\d+) (\\S+) ([^:\\[]+)\\[?(\\d*)\\]?:\\s+(.*)$",

  "fields": "syslog_priority,timestamp,host,syslog_program,syslog_pid,message",
  "numerical_fields": "syslog_pid",
  "date_format": "MMM DD HH:mm:ss Z"
}