IIS data type filebeat 6.3


(Stefano) #1

Hi,
I'm trying to put iis logs in kibana using filebeat, I've seen that the stable version 6.2 still not have this implemented so I've compiled the new 6.3 version.
In this version de module is present but the data are not correctly converted, for example there is no location (only lat and lon in 2 separated fields) anche the iis.access.request_time_ms is not a float but a keyword.
So i've compiled the 7.0 alpha version and there everything is working, but I think it will be good to fix it in the 6.3 isn't it?


(Carlos PĂ©rez Aradros) #2

Hi @stestaz, could you please paste examples of your documents? I had a look to iis module history and it seems not much changed after first merge (except a fix on the dashboard loading): https://github.com/elastic/beats/commits/master/filebeat/module/iis

Best regards


(Stefano) #3

Hi Exekias,
these are 3 rows of my iis access log, actually I'm running the 7.0.0 alpha1 version of filebeat and everything is working.

2018-05-31 10:39:06 10.250.0.15 GET /Bi.Portal/Bi.secur/On.Hospital2/AreaPrenotazione/Planning/GetTemplateUnitaErogatrici dataInizio=2018-06-03T22%3A00%3A00.000Z&dataFine=2018-06-07T22%3A00%3A00.000Z&codiciUniero=1212&mode=0 443 5829 93.64.244.254 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2743.116+Safari/537.36+Edge/15.15063 https://mypage.mysite.com/Bi.Portal/Bi.secur/On.Hospital2/AreaPrenotazione/Planning 200 0 0 192
2018-05-31 10:39:07 10.250.0.15 POST /Bi.Portal/Bi.secur/On.Hospital/Prenotazioni/QueryServices/PrenotazioniQueryService.svc - 443 5120 37.182.228.79 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:47.0)+Gecko/20100101+Firefox/47.0 https://mypage.mysite.com/Bi.Portal/Bi.secur/On.Hospital/Prenotazioni/ClientBin/Onit.OnHospital.Prenotazione.SL.xap?v3.6.3.0 200 0 0 1433
2018-05-31 10:39:07 10.250.0.15 POST /Bi.Portal/Bi.secur/On.Hospital/Prenotazioni/QueryServices/PrenotazioniQueryService.svc - 443 5120 37.182.228.79 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:47.0)+Gecko/20100101+Firefox/47.0 https://mypage.mysite.com/Bi.Portal/Bi.secur/On.Hospital/Prenotazioni/ClientBin/Onit.OnHospital.Prenotazione.SL.xap?v3.6.3.0 200 0 0 1593
2018-05-31 10:39:07 10.250.0.15 GET /Onit.OnPortal/App/Wait.aspx /Bi.Portal/Bi.secur/On.Hospital2/Prenotazione/Prenotazione/Prenotazione.aspx?HistoryClear=true 443 - 37.182.228.79 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko https://anotherpage.mysite.com/Onit.OnPortal/App/LeftBar.aspx?APPID=OnHospital&APPURL= 200 0 0 51


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.