我正在通过json将Windows调试日志发送到Elasticsearch,我需要解析它们。和微软一样,没有什么是容易的。DNS调试日志不是CSV。该文件中唯一有用的事情是它有固定的列长度。600c R Q [8081 DR NOERROR] A (9)grokdebug(9)herokuapp(3)com(0)
我看了这个堆栈溢出的答案:,并试图设置一个grok过滤器来解析这些列<dns_date_n_time>.{21}) (?<dns</e
当解析一个域时,我的syslog中有一个错误,我也是DNS的。Nov 24 21:51:55 moo named[4075]: DNS format error from 192.227.143.105#53 resolving bostonyoungentrepreneurs.com/NS for client 127.0.0.1#65133: invalid response
Nov 24 21:51:55 moo named[4075]: DNS format error fromresolving bos
System.Net.Internals.SocketExceptionFactory+ExtendedSocketException (00000005, 0xFFFDFFFF): Name or service not known at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
at System.Net.NetworkInformation.Ping