Source code for plaso.formatters.iis
# -*- coding: utf-8 -*-
"""The Microsoft IIS log file event formatter."""
from __future__ import unicode_literals
from plaso.formatters import interface
from plaso.formatters import manager
[docs]class IISLogFileEventFormatter(interface.ConditionalEventFormatter):
"""Formatter for a Microsoft IIS log file event."""
DATA_TYPE = 'iis:log:line'
FORMAT_STRING_PIECES = [
'{http_method}',
'{requested_uri_stem}',
'[',
'{source_ip}',
'>',
'{dest_ip}',
':',
'{dest_port}',
']',
'HTTP Status: {http_status}',
'Bytes Sent: {sent_bytes}',
'Bytes Received: {received_bytes}',
'User Agent: {user_agent}',
'Protocol Version: {protocol_version}']
FORMAT_STRING_SHORT_PIECES = [
'{http_method}',
'{requested_uri_stem}',
'[',
'{source_ip}',
'>',
'{dest_ip}',
':',
'{dest_port}',
']']
SOURCE_LONG = 'IIS Log'
SOURCE_SHORT = 'LOG'
manager.FormattersManager.RegisterFormatter(IISLogFileEventFormatter)