戻る
-
タイトル
Windows XML Parsing Has Additional Whitespaces When Using XML Parser -
説明
Within Windows security logs, some logs contain a single whitespace which is expected, while some hosts log with three whitespaces. -
原因
A recent change to Microsoft Windows has changed the number of whitespaces within the logs. -
対策
Workaround:
A rewrite rule, such as the example below, can help to modify the multiple whitespaces back to a single whitespace:rewrite r_example{ subst("]\s\s\s", "]\s", value("MESSAGE")); };