zc7lyq
Last Updated: February 25, 2016
·
1.922K
· rgatti

Regex to parse IIS W3SVC9 log

([^:]+):(\S+) (\S+) (\S+) (\S+) (\S+) (GET|POST) (.*?) (\S+) (\d+) - (\S+) (\S+) (.*?) (?:- -|\S+) (\S+) (\d+) .*

Fields are:

  • file
  • date
  • time
  • format
  • server
  • dest
  • method
  • path
  • qs
  • port
  • src
  • proto
  • useragent
  • domain
  • status