$raw_event contains no data

Tags:

#1 peter.forsythe@albumprinter.com

define ROOT C:\Program Files (x86)\nxlog



Moduledir %ROOT%\modules

CacheDir %ROOT%\data

Pidfile %ROOT%\data\nxlog.pid

SpoolDir %ROOT%\data

LogFile %ROOT%\data\nxlog.log





#### Extensions - load and configure global extendsions

<Extension eW3c>

    Module xm_csv

    Fields $date, $time, $s-ip, $cs-method, $cs-uri-stem, $cs-uri-query, $s-port, $cs-username, $c-ip, $csUser-Agent, $sc-status, $sc-substatus, $sc-win32-status, $time-taken

    FieldTypes string, string, string, string, string, string, integer, string, string, string, integer, integer, integer, integer

    Delimiter ' '

    QuoteChar '"'

    EscapeControl FALSE

    UndefValue -

</Extension>



<Extension eFileOp>

    Module xm_fileop

</Extension>

####



#### Inputs

<Input iIIS-fulfillment.Api.1>

    Module    im_file

    File     "D:\\APShared\\Log\\W3SVC1\\\\*"

    SavePos    TRUE

    

#    Exec if $raw_event =~ /^#/ drop();



    Exec file_write("C:\\temp\\nxlog_RawIIS.log", $raw_event+"some text man"); \

        eW3c->parse_csv(); \

        $SourceName = "IIS-fulfillment.Api"; \

        file_write("C:\\temp\\nxlog_IIS-csv.log", $raw_event);

</Input>

####



#### Processor



####



#### Outputs

<Output oIISFile>

    module    om_file

    File    "c:\\temp\\nx_iis.out"

</Output>

####



#### Routes

<Route rIISFile>

    path     iIIS-fulfillment.Api.1 => oIISFile

</Route>



NXLOG.log



2015-03-04 12:13:45 INFO nxlog-ce-2.8.1248 started

2015-03-04 12:14:11 ERROR procedure 'parse_csv' failed at line 40, character 94 in C:\Program Files (x86)\nxlog\conf\nxlog.conf. statement execution has been aborted; Not enough fields in CSV input, expected 14, got 0 in input ''



"C:\\temp\\nxlog_RawIIS.log"



contains: some text man



 



C:\\temp\\nxlog_IIS-csv.log - File not created.



Help.  Where's my $raw_event data?