使用MS Message Analyzer解析JSON日志文件

时间:2016-05-20 09:26:16

标签: json microsoft-message-analyzer

MS Message Analyzer的文档描述了it can read JSON files

我有一个每行JSON编码的日志文件,如下所示:

{"userid":1,"action":"login","timestamp":1463734780036}
{"userid":1,"action":"logout","timestamp":1463734780036}
{"userid":2,"action":"login","timestamp":1463734780036}
{"userid":2,"action":"logout","timestamp":1463734780036}

但是,它只读取第一行。

sample

我尝试用数组包装日志条目:

[{"userid":1,"action":"login","timestamp":1463734780036},
{"userid":1,"action":"logout","timestamp":1463734780036},
{"userid":2,"action":"login","timestamp":1463734780036},
{"userid":2,"action":"logout","timestamp":1463734780036}]

MSMA将此视为一个大日志条目。

sample2

我想在MSMA中将每个日志条目读作消息,如CSV文件:

sample3

MSMA不支持拆分JSON文件的消息吗?

0 个答案:

没有答案