Last Modified: Nov 22, 2021
Opened: Oct 12, 2021
Client_request_uri field in dosl7 splunk remote logging is lacking in escape sequence for double quote that would cause problem with splunk format that expects double quote escaped with a back slash. This uri string /a.htm"l will produce client_request_uri="/a.htm"l" (The second double quote should be escaped with a back slash but it is not.)
Generated splunk remote message violates the format requirement.
- dosl7 remote logging in splunk format - uri contains double quote character