# Redis 7.4.1 src/server.c serverLogRaw: "%d:%c %s %c %s" (pid, role X C S M, "%d %b %Y %H:%M:%S.%03d", one of ".-*#" for debug verbose notice warning); serverLogFromHandler: "<pid>:signal-handler (<time>) <msg>"
# Redis 2.4.6 src/redis.c redisLog: "[%d] %s %c %s" with "%d %b %H:%M:%S"; 2.6.17 adds ".%03d"; beats' redis-darwin-3.0.2.log shows the role without the year
# Lines from Elastic beats v9.5.5 filebeat/module/redis/log/test and lnav v0.14.1 redis_log samples
26571:M 27 Dec 2018 11:19:18.874 * Synchronization with replica 10.114.208.18:6023 succeeded ⇒ {"rule": "redis", "level": "info", "leveled": true, "name": "", "message": "Synchronization with replica 10.114.208.18:6023 succeeded", "prefixed": true}
1:M 29 Aug 2023 13:47:38.984 * monotonic clock: POSIX clock_gettime ⇒ {"rule": "redis", "level": "info", "leveled": true, "name": "", "message": "monotonic clock: POSIX clock_gettime"}
4961:M 30 May 12:50:13.457 * Increased maximum number of open files to 10032 (it was originally set to 4864). ⇒ {"rule": "redis", "level": "info", "leveled": true, "name": "", "message": "Increased maximum number of open files to 10032 (it was originally set to 4864)."}
4961:M 30 May 12:50:13.463 # Server started, Redis version 3.0.2 ⇒ {"rule": "redis", "level": "warn", "name": "", "message": "Server started, Redis version 3.0.2"}
5092:M 30 May 12:57:24.234 # Redis is now ready to exit, bye bye... ⇒ {"rule": "redis", "level": "warn", "name": "", "message": "Redis is now ready to exit, bye bye..."}
98738:M 30 May 12:23:52.442 * Saving the final RDB snapshot before exiting. ⇒ {"rule": "redis", "level": "info", "leveled": true, "name": "", "message": "Saving the final RDB snapshot before exiting."}
[2932] 31 May 04:32:08 * Server started, Redis version 2.4.6 ⇒ {"rule": "redis", "level": "info", "leveled": true, "name": "", "message": "Server started, Redis version 2.4.6"}
[2932] 31 May 04:32:08 # Open data file dump.rdb: No such file or directory ⇒ {"rule": "redis", "level": "warn", "name": "", "message": "Open data file dump.rdb: No such file or directory"}
[2932] 31 May 04:32:08 - 0 clients connected (0 slaves), 1179968 bytes in use ⇒ {"rule": "redis", "level": "debug", "name": "", "message": "0 clients connected (0 slaves), 1179968 bytes in use"}
[3574] 13 Apr 12:52:30.731 # Sentinel runid is 2e3b1eed9e95d760e1853e047a33bf4f8ac16c59 ⇒ {"rule": "redis", "level": "warn", "name": "", "message": "Sentinel runid is 2e3b1eed9e95d760e1853e047a33bf4f8ac16c59"}
5092:signal-handler (1496141844) Received SIGINT scheduling shutdown... ⇒ {"rule": "redis", "level": "info", "leveled": false, "name": "", "message": "Received SIGINT scheduling shutdown..."}
1:signal-handler (1693279182) Received SIGTERM scheduling shutdown... ⇒ {"rule": "redis", "level": "info", "leveled": false, "name": "", "message": "Received SIGTERM scheduling shutdown..."}
# constructed 812:S 21 Oct 2026 14:03:01.123 . Client closed connection id=7 addr=10.0.0.5:51234 ⇒ {"rule": "redis+kv", "level": "debug", "name": "", "message": "Client closed connection id=7 addr=10.0.0.5:51234"}
# constructed 812:C 21 Oct 2026 14:03:01.123 * DB saved on disk ⇒ {"rule": "redis", "level": "info", "leveled": true, "name": "", "message": "DB saved on disk"}
# constructed 812:X 21 Oct 2026 14:03:01.123 # +sdown master pump 10.0.0.5 6379 ⇒ {"rule": "redis", "level": "warn", "name": "", "message": "+sdown master pump 10.0.0.5 6379"}
# constructed 812:M 21 Oct 2026 14:03:01.123 - Accepted 10.0.0.5:51234 ⇒ {"rule": "redis", "level": "debug", "name": "", "message": "Accepted 10.0.0.5:51234"}
# constructed [812] 21 Oct 14:03:01.123 . Client closed connection ⇒ {"rule": "redis", "level": "debug", "name": "", "message": "Client closed connection"}
# Redis 1.3.7 redis.c already printed the pid; beats' 1.2.6 lines have none, and print a warning with "*"
30 May 10:05:20 . 0 clients connected (0 slaves), 618932 bytes in use, 0 shared objects. ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "30 May 10:05:20 . 0 clients connected (0 slaves), 618932 bytes in use, 0 shared objects."}
30 May 10:03:19 - Server started, Redis version 1.2.6 ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "30 May 10:03:19 - Server started, Redis version 1.2.6"}
# constructed 812:Q 21 Oct 2026 14:03:01.123 * Q is not a role ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "812:Q 21 Oct 2026 14:03:01.123 * Q is not a role"}
# constructed 812:M 21 Oct 2026 14:03:01.123 ! not a level mark ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "812:M 21 Oct 2026 14:03:01.123 ! not a level mark"}
# constructed 812:M 21 Oct 2026 14:03:01.123 *no space ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "812:M 21 Oct 2026 14:03:01.123 *no space"}
# constructed 812:M 21 Oct 2026 14:03:01 * no milliseconds ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "812:M 21 Oct 2026 14:03:01 * no milliseconds"}
# constructed 812:M 2026-10-21 14:03:01.123 * ISO date ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "812:M 2026-10-21 14:03:01.123 * ISO date"}
# constructed [812] 21 Oct 14:03:01 WARNING a word, not a mark ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "[812] 21 Oct 14:03:01 WARNING a word, not a mark"}
# constructed 812:signal-handler Received SIGTERM without the time ⇒ {"rule": "plain", "level": "info", "leveled": false, "message": "812:signal-handler Received SIGTERM without the time"}
[1] 2019/02/06 07:19:40.624334 [INF] Starting nats-server version 1.3.0 ⇒ {"rule": "nats", "level": "info", "message": "Starting nats-server version 1.3.0"}
2016/10/25 14:49:34 [error] 54053#0: *1 open() "/usr/local/Cellar/nginx/1.10.2_1/html/favicon.ico" failed (2: No such file or directory), client: 127.0.0.1, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "localhost:8080", referrer: "http://localhost:8080/" ⇒ {"rule": "nginx", "level": "error", "message": "*1 open() \"/usr/local/Cellar/nginx/1.10.2_1/html/favicon.ico\" failed (2: No such file or directory), client: 127.0.0.1, server: localhost, request: \"GET /favicon.ico HTTP/1.1\", host: \"localhost:8080\", referrer: \"http://localhost:8080/\""}
# constructed [    1.234567] usb 1-1: new device ⇒ {"rule": "linux", "level": "info", "name": "kernel", "message": "usb 1-1: new device"}
