HAProxy¶
About¶
HAProxy Enterprise is the industry’s leading software load balancer and application delivery controller. It powers modern application delivery at any scale and in any environment, providing the utmost performance, observability and security.
Product Details¶
Product Type: Load Balancer
Product Tier: Tier III
Integration URL: HAProxy Technical Documentation
Integration Method: Custom
Log Guide: Sample Logs by Log Type
Parser Details¶
Log Format: JSON
Expected Normalization Rate: 99%-100%
Data Label: HAPROXY
UDM Fields (list of all UDM fields leveraged in the Parser):
| Log File Field | UDM Field |
|---|---|
| actconn | additional.fields |
| backend_name | target.cloud.project.attribute.labels |
| beconn | additional.fields |
| client_ip | principal.ip |
| client_port | principal.port |
| cyderes_log_type | observer.hostname |
| feconn | additional.fields |
| frontend_name | target.cloud.project.attribute.labels |
| retries | additional.fields |
| server_hostname | target.hostname |
| server_name | network.tls.client.server.name |
| srvconn | additional.fields |
| state | observer.resource.attribute.labels |
| Tc | additional.fields |
| Tt | additional.fields |
| Tw | additional.fields |
Product Event Types¶
| Event | UDM Event Classification |
|---|---|
| all | GENERIC_EVENT |
Log Sample¶
{"cyderes_log_type":"HAPROXY","message":"Mar 6 08:14:42 lb1s-cvps haproxy[2004]: 10.106.52.134:37608 [06/Mar/2024:08:14:42.447] staging_https portal_staging_https/hostname1 31/1/81 4985 -- 2/1/0/0/0 0/0","state":"master"}
Sample Parsing¶
metadata.vendor_name = "HAProxy"
metadata.product_name = "HAPROXY"
additional.fields["actconn"] = "2"
additional.fields["beconn"] = "1"
additional.fields["feconn"] = "1"
additional.fields["srvconn"] = "0"
additional.fields["retries"] = "0"
additional.fields["termination_state"] = "--"
additional.fields["Tc"] = "1"
additional.fields["Tt"] = "81"
additional.fields["Tw"] = "31"
principal.ip = "10.106.52.134"
principal.port = "37608"
target.cloud.project.attribute.labels[0].key = "backend_name"
target.cloud.project.attribute.labels[0].value = "portal_staging_https"
target.cloud.project.attribute.labels[1].key = "frontend_name"
target.cloud.project.attribute.labels[1].value = "staging_https"
network.tls.client.server.name = "hostname1"
observer.hostname = "HAPROXY"
observer.resource.attribute.labels[0].key = "state"
observer.resource.attribute.labels[0].key = "master"
Rules¶
Coming Soon