Skip to content

Instantly share code, notes, and snippets.

@brentroady

brentroady/logstash-grok-iis

Created August 6, 2014 16:05
Show Gist options
  • Save brentroady/254a9fd7c7f4a0b5f836 to your computer and use it in GitHub Desktop.
Save brentroady/254a9fd7c7f4a0b5f836 to your computer and use it in GitHub Desktop.
Download ZIP
Logstash Grok Pattern for a Default IIS 7.5 Log
Raw
logstash-grok-iis
%{TIMESTAMP_ISO8601:timestamp} %{IP:sourceip} %{WORD:method} %{URIPATH:uristem} (?:-|%{NOTSPACE:uriquery}) %{POSINT:port} (?:-|%{NOTSPACE:username}) %{IP:clientip} %{NOTSPACE:useragent} %{NUMBER:status} %{NUMBER:substatus} %{NUMBER:win32status} %{NUMBER:timetaken}
@ibowen
Copy link

ibowen commented Feb 5, 2016

Thank you very much!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment