Symptoms

Client_request_uri field in dosl7 splunk remote logging is lacking in escape sequence for double quote that would cause problem with splunk format that expects double quote escaped with a back slash. This uri string /a.htm"l will produce client_request_uri="/a.htm"l" (The second double quote should be escaped with a back slash but it is not.)

Impact

Generated splunk remote message violates the format requirement.

Conditions

- dosl7 remote logging in splunk format - uri contains double quote character

Workaround

None

Fix Information

None

Behavior Change