On Friday, July 23, 2004 7:05 PM [GMT],
System Administrator <[EMAIL PROTECTED]> wrote:

> Here are a few line from my logfile;
> 65.54.164.40 - - [08/jul/2004:03:07:39 -0600] "get /stanns/index.html
> http/1.0" 404 211 404 211 - - 196 168 295 208 0 "" "msnbot/0.11
> (+http://search.msn.com/msnbot.htm)"
> 66.194.6.83 - - [08/jul/2004:05:58:28 -0600] "get / http/1.1" 200
> 3549 - - -
> - 108 272 - - 0 "" "mozilla/4.0 (compatible; msie 6.0; windows nt 5.1;
> q312467)"
> 24.14.151.202 - - [08/jul/2004:13:29:04 -0600] "get / http/1.1" 200
> 3549 200 3549 - - 437 246 551 272 0 "" "mozilla/4.0 (compatible; msie
> 6.0; windows nt
> 5.1; .net clr 1.0.3705; .net clr 1.1.4322; alexa toolbar)"

You said it's in Netscape Extended Logfile format - does the first line
of the logfile not have a description of the logformat something like
this:

format=%Ses->>client.ip% - %Req->vars.auth-user% [%SYSDATE%]
"%Req->>reqpb.clf-request%" %Req->srvhdrs.clf-status%
%Req->>srvhdrs.content-length% %duration%

I have no idea what the 9 different fields between the URL and the
referrer might be - the first is obviously the status code, and the 2nd
is probablt the size, and they are repreated in the 1st and 3rd example
you give, but not in the 2nd example.

Try this:
LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b %j "%f" "%B")

Aengus


>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Aengus
> Sent: July 23, 2004 11:01 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [analog-help] APACHE Logformat, so many errors
>
>
> On Friday, July 23, 2004 6:15 PM [GMT],
> System Administrator <[EMAIL PROTECTED]> wrote:
>
>> C:\Program Files\analog\analog 5.32>analog
>> analog: analog version 5.32/Win32
>> analog: Warning L: Large number of corrupt lines in logfile
>>   C:\websites\copy_new\logs\access.07: turn debugging on or try
>>   different LOGFORMAT
>>   (For help on all errors and warnings, see docs/errors.html)
>>     Current logfile format:
>>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B"\n
>>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B"\n
>>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b "%f" "%B"\n
>
> Post 2 or 3 lines from your logfile.
>
>> If I use debugging;
>>
>> C:\Program Files\analog\analog 5.32>analog debug on
>> analog: analog version 5.32/Win32
>> analog: Warning F: Failed to open logfile debug: ignoring it
>
> You just told Analog to analyze a logfile called "debug".
>
> Try
> C:\Program Files\analog\analog 5.32>analog +C"debug on"
>
> or add DEBUG ON  to your analog.cfg file.
>
> Aengus
>
+-----------------------------------------------------------------------
> +-
>>  TO UNSUBSCRIBE from this list:
>>    http://lists.isite.net/listgate/analog-help/unsubscribe.html
>>
>>  Digest version: http://lists.isite.net/listgate/analog-help-digest/
>>  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
>>  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
>
+-----------------------------------------------------------------------
> +-
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004
>
>
>
+-----------------------------------------------------------------------
-
>>  TO UNSUBSCRIBE from this list:
>>    http://lists.isite.net/listgate/analog-help/unsubscribe.html
>>
>>  Digest version: http://lists.isite.net/listgate/analog-help-digest/
>>  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
>>  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
>
+-----------------------------------------------------------------------
-

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  Digest version: http://lists.isite.net/listgate/analog-help-digest/
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------

Reply via email to