Hi,
I am log shipping IIS Advanced Logs and one of the fields which we are
shipping is s-contentpath. This has a windows path in the output.
When parsing this via csv and then converting to json, I see that the \
(backslash) is being removed from the path. I understand that this is by
design and wanted assistance in getting a regex (if that is what is
needed), to place a double backslash (\\) for each single backslash (\).
Eg input
144|148|213.229.90.97|"
*C:\Octopus\Applications\uat.bbbb.xxxx\yyyyxxxxx\2.6.5052.6*
"|-|2015-10-13|2015-10-13|”test.example.com
"|HEAD|"https"|"HTTP/1.1"|-|-|"MYSEREVR"|443|192.168.1.19|”MYSITE-SITE"|302|0|15|01:01:28.198|00:01:28.198|-|/uk|"Site24x7"|-|0
Eg output (without regex)
{"EventReceivedTime":"2015-10-13
17:23:19","SourceModuleName":"IIS_AdvancedLogs","SourceModuleType":"im_file","cs-bytes":"144","sc-bytes":"244","c-ip":”2.2.2.2","s-contentpath":”
*C:OctopusApplicationsuat.bbbb.xxxxyyyyxxxx2.6.5052.6*
","cs(Cookie)":null,"date-local":"2015-10-1","date":"2015-10-1","cs(Host)”:”
test.example.com
","cs-method":"HEAD","c-protocol":"https","cs-version":"HTTP/1.1","s-proxy":null,"cs(Referer)":null,"s-computername”:"MYSERVER","s-port":"443","s-ip":"192.168.1.19","s-sitename”:"MYSITE-SITE","sc-status":"302","sc-substatus":"0","TimeTakenMS":"0","time-local":"01:17:14.850","time":"00:17:14.850","cs-uri-query":null,"cs-uri-stem":"/uk","cs(User-Agent)":"Site24x7","cs-username":null,"sc-win32-status":"0"}
Thanks in advance,
Amit
------------------------------------------------------------------------------
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
