62 lines
2.1 KiB
PowerShell
62 lines
2.1 KiB
PowerShell
cd C:\Spam
|
|
$rootUrl = '\/CWS\/Payment\/PdfReport'
|
|
|
|
$select = Get-Item *.log | Select-String -Pattern $rootUrl
|
|
$selectcsv = $select.line | ConvertFrom-Csv -Delimiter ' ' -Header ('date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken' -split ' ')
|
|
|
|
#$select2 = $select | where { $_.line -match 'documentNumber=F007940834' -or $_.line -match 'documentNumber=F001602219' -or $_.line -match 'documentNumber=F004716680' -or $_.line -match 'documentNumber=F007000458' }
|
|
#$select2csv = $select.line | ConvertFrom-Csv -Delimiter ' ' -Header ('date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken' -split ' ')
|
|
#$select3 = $select | where { $_.line -match '69303ba0-4050-4219-9913-af7ca3a8ad31' }
|
|
#$select3csv = $select3.line | ConvertFrom-Csv -Delimiter ' ' -Header ('date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken' -split ' ')
|
|
|
|
$select2 = $selectcsv.'cs-uri-query' | Select-String -Pattern 'documentNumber=([A-Z][0-9]*)'
|
|
|
|
$data = @'
|
|
F000018636
|
|
F000021482
|
|
F000024219
|
|
F000026112
|
|
F000028853
|
|
F000031097
|
|
F000034604
|
|
F000038300
|
|
F000044790
|
|
F000048042
|
|
F000050669
|
|
F000053147
|
|
F000057263
|
|
F003002358
|
|
F003007266
|
|
F003010442
|
|
F003017056
|
|
F003021908
|
|
F003026206
|
|
F003030162
|
|
F003036063
|
|
F003041789
|
|
F003042429
|
|
F003051839
|
|
F003057120
|
|
F003061224
|
|
F003066429
|
|
F003076822
|
|
F003081376
|
|
F003087833
|
|
F003094635
|
|
F003103301
|
|
F003107703
|
|
F003112733
|
|
F003118791
|
|
F003124053
|
|
F003131888
|
|
F003138217
|
|
F003144770
|
|
F003149616
|
|
'@
|
|
$find = $data.Split("`r`n", [System.StringSplitOptions]::RemoveEmptyEntries)
|
|
|
|
$get = $select2 | % {
|
|
Write-Host "Matching '$($_.Matches[0].Groups[1].Value)'"
|
|
if($_.Matches[0].Groups[1].Value -match ($find -join ',')) { $_.Matches[0].Groups[1].Value }
|
|
}
|