Hi All:
If you have some time - please advise how I can use Log Parser 2.2 to extract the meaningful information from this message, count and time/date stamp them in order.
My application logs are filling up with this type of message and from the literature on Log Parser there seams no way to make good with this information. I have no access to enterprise monitoring tools and this does not make my role easy. (15,000 users). I know the basics of Log Parser and would be grateful if some one with more experince than I let me know if I can create a meaningful report based on this style of event message,
Any postitive ideas will be welcomed.
I shall see if there is a log parser forum and post my error msg there as well.
Event code: 3003
Event message: A validation error has occurred.
Event time: 18/07/2012 22:03:10
Event time (UTC): 18/07/2012 21:03:10
Event ID: 59ded555918a4ae686893094852159bd
Event sequence: 194823
Event occurrence: 27
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/588998939/Root-3-129870969211189582
Trust level: Full
Application Virtual Path: /
Application Path: E:\websites\mywebsiteisfoolproof\
Machine name: The Concorde
Process information:
Process ID: 188
Process name: w3wp.exe
Account name: NT AUTHORITY\NETWORK SERVICE
Exception information:
Exception type: HttpRequestValidationException
Exception message: A potentially dangerous Request.QueryString value was detected from the client (PostCode="...jwfsqppm, <a href="http://viag...").
Request information:
Request URL:www.mywebsiteisfoolproof.ie
validation error has occurred.C+18/07/2012 22:03:10Ca+href18/07/2012 22:03:10D68.169.80.149http18/07/2012 22:03:10AA validation error has occurred.FA validation error has occurred.Fviagrabrief.comA validation error has occurred.F68.169.80.14918/07/2012 22:03:10EBuy+Viagra18/07/2012 22:03:10CA validation error has occurred.Fa18/07/2012 22:03:10EA validation error has occurred.C+xcbETpXA validation error has occurred.C+59ded555918a4ae686893094852159bdBurl18/07/2012 22:03:10Dhttp18/07/2012 22:03:10AA validation error has occurred.FA validation error has occurred.Fviagrabrief.comA validation error has occurred.F59ded555918a4ae686893094852159bdDWarning+buy+viagra+now59ded555918a4ae686893094852159bdBA validation error has occurred.Furl59ded555918a4ae686893094852159bdDA validation error has occurred.C+zsWrcAMA validation error has occurred.C+http18/07/2012 22:03:10AA validation error has occurred.FA validation error has occurred.Fviagrabrief.comA validation error has occurred.F+Buy+ViagraA validation error has occurred.C+cAzXXTK.&hidFinalUrl=A validation error has occurred.A validation error has occurred. sA validation error has occurred.Fresults.aspx
Request path: /pagestohack/results.aspx
User host address: XX.XX.XX.XX
User: An Internet User
Is authenticated: False
Authentication Type:
Thread account name: NT AUTHORITY\NETWORK SERVICE
Thread information:
Thread ID: 10
Thread account name: NT AUTHORITY\NETWORK SERVICE
Is impersonating: False
Stack trace: at System.Web.HttpRequest.ValidateString(String s, String valueName, String collectionName)
at System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, String collectionName)
at System.Web.HttpRequest.get_QueryString()
at System.Web.UI.Page.DeterminePostBackMode()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.pagetohack/results_aspx.ProcessRequest(HttpContext context) in c:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\root\96a3d42b\bead337b\App_Web_lgkptp5p.0.cs:line 0
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, BooleanThanks.
