We just switched to use extended logging. It’s cool how the log-analytics can use the #Fields line that is added by WebLogic.
Example…
#Fields: date time cs-uri-stem cs-uri-query cs(X-Forwarded-For) cs(User-Agent) cs(Referer) sc-status sc-bytes cs-host cs-username time-taken
Unfortunately the log-analytics script wouldn’t parse our files. Taking a look in log-analytics.py the constant is defined like this…
FIELDS_LINE_PREFIX = '#Fields: '
With a space after the colon. WebLogic has no space and a Tab instead. Once I removed the Space in the constant definition it all worked fine.
Is this a bug or am I doing something wrong?