@mattab opened this issue on February 18th 2014

It was requested that we add support to parse Netscaler w3c logs.

Some Load Balancers (Citrix Netscaler) use this w3c format.

Here is a sample log format:

#Version: 1.0
#Software: Netscaler Web Logging(NSWL)
#Date: 2014-02-18 11:55:13
#Fields: date time c-ip cs-username sc-servicename s-ip s-port cs-method cs-uri-stem cs-uri-query sc-status cs-bytes sc-bytes
 time-taken cs-version cs(User-Agent) cs(Cookie) cs(Referer)
2014-02-18 11:55:13 - HTTP 8080 GET /Citrix/XenApp/Wan/auth/login.jsp - 302 247 355 0 HTTP/1.1 Mozi
ET+CLR+3.5.21022) - -
2014-02-18 11:55:13 - HTTP 8080 GET /Citrix/XenApp/Wan/auth/silentDetection.jsp - 200 310 5609 0 HT
TP/1.1 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04
506.648;+.NET+CLR+3.5.21022) JSESSIONID=7BBF2F11B80261B27D23010421412323 -

@quba commented on November 25th 2014

@mattab: maybe we can do this generic, e.g. allow to configure the importer and map header fields to particular parameters in the request.

There is the same problem with non-standard IIS logs (e.g. using Advanced Logging Module where you can define the format of the log file).

@mattab commented on December 3rd 2014

See also #6795

@diosmosis commented on December 9th 2014

Fixed by #6825.

This issue was closed on December 9th 2014
Powered by GitHub Issue Mirror