Hello. I have a few servers: a,b,c and 1,2,3 Servers a,b,c work with this - base search | rex field=cs_uri_stem "(\/apps\/)(?P< test>[\d\w]+)(\/\w+)(.*\b\w+)$" | top limit=1000 test cs_uri_stem= /apps/example/foo.aspx some of the cs_uri_stem will be /apps/example/example/foo.aspx Servers 1,2,3 work with this - base search | rex field=cs_uri_stem "(\/apps\/)|(?P< test>[\d\w]+)(\/\w+)(.*\b\w+)$" | top limit=1000 test cs_uri_stem= /example/foo.aspx I would like to combine them so that I get the results from all the servers. Please excuse the space in < test> it wouldn't show without the space. ... View more

Hello, I am trying to pull certain criteria out of cs-uri-stem that contain different lengths for cs-uri-stem. I am trying to get one field extraction from all the examples. Here are some examples of the cs_uri_stem entries: /apps/orderalert/default.aspx /netpub/ser.np /apps/ajt/a2dsfile/files/dll/data.dll /apps/ajt/SE3SPXWEBSERVICE/SpxSE3WebService.asmx /aspnet_client/system_web/2_0_50727/Themes/Normal/images/sss_head_bg.gif The goal is to get everything minus the last bit and the "/" at the beginning and end. I have highlighted what it is I want to get out of cs_uri_stem. If I need to post more from the log files I can. apps/orderalert netpub apps/ajt/a2dsfile/files apps/ajt/SE3SPXWEBSERVICE aspnet_client/system_web/2_0_50727/Themes/Normal/images ... View more

Hello, Currently having trouble getting the Web Analytics to work correctly. Non of the dashboards get results. I have scoured this site for explanations and keep getting similar answers, site setup might be incorrect. Though for the life of me... it's not working. Details: Universal Forwarder installed on the remote server. Index is main. Website Setup: Site = TESTSITE Host = TESTSITE Source = E:\Logfiles\W3SVC1\u_ex* Available host and source combinations have green checks on all entries. Tag=web search works fine, eventtype=pageview populates, file populates, just no site #Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken 2016-07-22 15:37:05 W3SVC1 TESTSITE 10.1.19.90 POST //default.aspx/SearchSalesParts - 80 DOMAIN\USER CLIENTIP HTTP/1.1 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko ASP.NET_SessionId=qd0aktxyhjml5e33l5jj2kf0 http://testsite/default.aspx testsite 200 0 0 499 584 78 host = testsite http_method = POST http_referer = http://testsiteurl/default.aspx http_request = /default.aspx/SearchSalesParts http_user_agent = Mozilla/5.0+(Windows+NT+6.1;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko source = E:\Logfiles\W3SVC1\u_ex160722.log sourcetype = iis I have followed the steps correctly in the documentation, and I've uninstalled/reinstalled the app already still same results. Any help would be appreciated, if you need any more details just ask I can get those no problem. ... View more