0
responses

define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log


#### Extensions - load and configure global extendsions
<Extension eW3c>
    Module xm_csv
    Fields $date, $time, $s-ip, $cs-method, $cs-uri-stem, $cs-uri-query, $s-port, $cs-username, $c-ip, $csUser-Agent, $sc-status, $sc-substatus, $sc-win32-status, $time-taken
    FieldTypes string, string, string, string, string, string, integer, string, string, string, integer, integer, integer, integer
    Delimiter ' '
    QuoteChar '"'
    EscapeControl FALSE
    UndefValue -
</Extension>

<Extension eFileOp>
    Module xm_fileop
</Extension>
####

#### Inputs
<Input iIIS-fulfillment.Api.1>
    Module    im_file
    File     "D:\\APShared\\Log\\W3SVC1\\\\*"
    SavePos    TRUE
    
#    Exec if $raw_event =~ /^#/ drop();

    Exec file_write("C:\\temp\\nxlog_RawIIS.log", $raw_event+"some text man"); \
        eW3c->parse_csv(); \
        $SourceName = "IIS-fulfillment.Api"; \
        file_write("C:\\temp\\nxlog_IIS-csv.log", $raw_event);
</Input>
####

#### Processor

####

#### Outputs
<Output oIISFile>
    module    om_file
    File    "c:\\temp\\nx_iis.out"
</Output>
####

#### Routes
<Route rIISFile>
    path     iIIS-fulfillment.Api.1 => oIISFile
</Route>

NXLOG.log

2015-03-04 12:13:45 INFO nxlog-ce-2.8.1248 started
2015-03-04 12:14:11 ERROR procedure 'parse_csv' failed at line 40, character 94 in C:\Program Files (x86)\nxlog\conf\nxlog.conf. statement execution has been aborted; Not enough fields in CSV input, expected 14, got 0 in input ''

"C:\\temp\\nxlog_RawIIS.log"

contains: some text man

 

C:\\temp\\nxlog_IIS-csv.log - File not created.

Help.  Where's my $raw_event data?

AskedMarch 4, 2015 - 12:17pm

Answers (0)