Hi,
I think another solution would be to specify a character that does not
appear in the data, for example:
EscapeChar \n
If you send us your .conf and an input sample that will help understand
the issue.
Regards,
Botond
On Fri, 16 Oct 2015 11:18:05 +0100
Amit Dattani <m...@amitdattani.com> wrote:
> Hi,
>
> Firstly, thanks for the response.
>
> Tried what you have suggested and this is not working as this is now
> escaping my delimiter which is the pipe ( | ) character. So if I use
> EscapeChar '"' then the output of the log is incorrect.
>
> Can you think of anything else or would only regex help?
>
> Thanks,
>
> Amit
>
> On 16 October 2015 at 08:33, Botond Botyanszki <b...@nxlog.org> wrote:
>
> > Hi,
> >
> > I think you need to add the following to your xm_csv instance:
> >
> > EscapeChar '"'
> > EscapeControl FALSE
> >
> > The default value for EscapeChar is the backslash and most likely that's
> > causing the windows pathnames to be mangled.
> >
> > Regards,
> > Botond
> >
> > On Thu, 15 Oct 2015 20:34:27 +0100
> > Amit Dattani <m...@amitdattani.com> wrote:
> >
> > > Hi,
> > >
> > > I am log shipping IIS Advanced Logs and one of the fields which we are
> > > shipping is s-contentpath. This has a windows path in the output.
> > >
> > > When parsing this via csv and then converting to json, I see that the \
> > > (backslash) is being removed from the path. I understand that this is by
> > > design and wanted assistance in getting a regex (if that is what is
> > > needed), to place a double backslash (\\) for each single backslash (\).
> > >
> > > Eg input
> > > 144|148|213.229.90.97|"
> > > *C:\Octopus\Applications\uat.bbbb.xxxx\yyyyxxxxx\2.6.5052.6*
> > > "|-|2015-10-13|2015-10-13|”test.example.com
> > >
> > "|HEAD|"https"|"HTTP/1.1"|-|-|"MYSEREVR"|443|192.168.1.19|”MYSITE-SITE"|302|0|15|01:01:28.198|00:01:28.198|-|/uk|"Site24x7"|-|0
> > >
> > > Eg output (without regex)
> > > {"EventReceivedTime":"2015-10-13
> > >
> > 17:23:19","SourceModuleName":"IIS_AdvancedLogs","SourceModuleType":"im_file","cs-bytes":"144","sc-bytes":"244","c-ip":”2.2.2.2","s-contentpath":”
> > > *C:OctopusApplicationsuat.bbbb.xxxxyyyyxxxx2.6.5052.6*
> > >
> > ","cs(Cookie)":null,"date-local":"2015-10-1","date":"2015-10-1","cs(Host)”:”
> > > test.example.com
> > >
> > ","cs-method":"HEAD","c-protocol":"https","cs-version":"HTTP/1.1","s-proxy":null,"cs(Referer)":null,"s-computername”:"MYSERVER","s-port":"443","s-ip":"192.168.1.19","s-sitename”:"MYSITE-SITE","sc-status":"302","sc-substatus":"0","TimeTakenMS":"0","time-local":"01:17:14.850","time":"00:17:14.850","cs-uri-query":null,"cs-uri-stem":"/uk","cs(User-Agent)":"Site24x7","cs-username":null,"sc-win32-status":"0"}
> > >
> > > Thanks in advance,
> > >
> > > Amit
> >
> >
> > ------------------------------------------------------------------------------
> > _______________________________________________
> > nxlog-ce-users mailing list
> > nxlog-ce-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
> >
------------------------------------------------------------------------------
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
