Adding Ostiarius parser and enabling it

parsers/ostiarius.py

@@ -0,0 +1,9 @@
+import re
+
+#27/04/16 09:42:38,000 kernel[0]: OSTIARIUS: /Applications/Xoib.app/Contents/MacOS/Xoib is from the internet & is unsigned -> BLOCKING!
+OSTIARIUS_EVENT_FILTER = re.compile('OSTIARIUS: .+BLOCKING')
+
+def parse(line, source=None):
+    if OSTIARIUS_EVENT_FILTER.findall(line):
+        return ('alert', 'Ostiarius', line.split('OSTIARIUS: ', 1)[-1])
+    return (None, '', '')

settings.py

@@ -14,7 +14,7 @@
     3306: 'connections',    # MySQL
     5432: 'connections',    # PostgreSQL
     5900: 'vnc',            # VNC
-    '/var/log/system.log': ('sudo', 'ssh', 'portscan'),
+    '/var/log/system.log': ('sudo', 'ssh', 'portscan', 'ostiarius'),
 }
 
 # Enabled output/display methods