Fixes #4936 on IIS when no query string it shows as '-' so we assume '' instead.

1 files changed, 3 insertions, 0 deletions

diff --git a/misc/log-analytics/import_logs.py b/misc/log-analytics/import_logs.py
index 6674e2f2fa..b853ae1280 100755
--- a/misc/log-analytics/import_logs.py
+++ b/misc/log-analytics/import_logs.py
@@ -1606,6 +1606,9 @@ class Parser(object):
 
             try:
                 hit.query_string = format.get('query_string')
+                # IIS detaults to - when there is no query string, but we want empty string
+                if hit.query_string == '-':
+                    hit.query_string = ''
                 hit.path = hit.full_path
             except BaseFormatException:
                 hit.path, _, hit.query_string = hit.full_path.partition(config.options.query_string_delimiter)