Re: [analog-help] log format detection fails ?
On Mon, 10 Dec 2001, Rainer Fuegenstein wrote: Hi, I experienced a strange problem with analog 5.03 (Unix): of all web sites running on our server (apache 1.3.x), only on has HostNameLookups On enabled, therefore writing the host name instead of the IP address of the client (if resolvable) as first field to the logfile. - when the first lines of the logfile start with hostnames, analog reports: /opt/analog/analog: Warning F: Can't auto-detect format of logfile /web1/log/tle.log: ignoring it [...] this is how the first lines of the tle.log actually look: m587p009.dipool.highway.telekom.at - - [01/Dec/2001:12:28:08 +0100] GET / HTTP/1.0 200 1624 - Mozilla/4.04 [en] (OS/2; I) Well, it's nothing to do with the hostname. It's because there is an extra pair of quotes round the browser. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ This is Henman's 8th Wimbledon, and he's only lost 7 matches. BBC, 2/Jul/01 + | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at |http://www.mail-archive.com/analog-help@lists.isite.net/ |http://lists.isite.net/listgate/analog-help/archives/ |http://www.tallylist.com/archives/index.cfm/mlist.7 +
[analog-help] log format detection fails ?
Hi, I experienced a strange problem with analog 5.03 (Unix): of all web sites running on our server (apache 1.3.x), only on has HostNameLookups On enabled, therefore writing the host name instead of the IP address of the client (if resolvable) as first field to the logfile. - when the first lines of the logfile start with hostnames, analog reports: /opt/analog/analog: Warning F: Can't auto-detect format of logfile /web1/log/tle.log: ignoring it - when the first lines of the logfile start with IP addresses, analog doesn't complain, it works even if the remaining 90% of lines start with hostnames instead of IP addresses. in apache, the logformat is globally set to combined. the analog configuration is divided into two parts: 1) analog.cfg file has the following lines at the very beginning: LOGFORMAT combined LOGFILE access.log IMAGEDIR /images/ DNSLOCKFILE /tmp/dnscache.lock DNSFILE /tmp/dnscache DNS WRITE [...] 2) a temporary file is generated per site and specified on the command line: /opt/analog/analog +g/tmp/anasite.cfg this is how it looks like for the site in question: LOGFILE /web/log/tle.log LOGFILE /web/log/tle.log.*.gz HOSTNAME www.tle.com BASEURL http://www.tle.com OUTFILE /stat/doc/analog/tle.html CHARTDIR /analog/tle. LOCALCHARTDIR /stat/doc/analog/tle. I've got 2 questions/assumptions: 1) is the included config file processed before the main config file so that logformat combined gets read after the LOGFILE ... statements and therefore analog tries to auto-detect the format and fails ? (It didn't work when logformat combined was specified in the included config file, either). 2) is there a (known) bug that analog isn't able to autodetect a log format when it starts with hostnames instead of IP addresses ? this is how the first lines of the tle.log actually look: m587p009.dipool.highway.telekom.at - - [01/Dec/2001:12:28:08 +0100] GET / HTTP/1.0 200 1624 - Mozilla/4.04 [en] (OS/2; I) m587p009.dipool.highway.telekom.at - - [01/Dec/2001:12:28:10 +0100] GET /pics/startanimation.gif HTTP/1.0 200 4176 - Mozilla/4.04 [en] (OS/2; I) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:27 +0100] GET / HTTP/1.1 304 - - Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:27 +0100] GET /pics/startanimation.gif HTTP/1.1 304 - http://www.thelivingedition.com/; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:32 +0100] GET /shop.htm HTTP/1.1 304 - - Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:32 +0100] GET /tle.css HTTP/1.1 304 - http://www.thelivingedition.com/shop.htm; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:33 +0100] GET /shop2.htm HTTP/1.1 304 - http://www.thelivingedition.com/shop.htm; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:33 +0100] GET /logo.htm HTTP/1.1 304 - http://www.thelivingedition.com/shop.htm; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:33 +0100] GET /frame_up.htm HTTP/1.1 304 - http://www.thelivingedition.com/shop2.htm; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:33 +0100] GET /home.htm HTTP/1.1 304 - http://www.thelivingedition.com/shop2.htm; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:33 +0100] GET /menu0.html HTTP/1.1 304 - http://www.thelivingedition.com/shop2.htm; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) n192p014.adsl.highway.telekom.at - - [01/Dec/2001:12:28:33 +0100] GET /pics/mu_thedesigner.gif HTTP/1.1 304 - http://www.thelivingedition.com/logo.htm; Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) tnx in advance for any help. cu + | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at |http://www.mail-archive.com/analog-help@lists.isite.net/ |http://lists.isite.net/listgate/analog-help/archives/ |http://www.tallylist.com/archives/index.cfm/mlist.7 +
Re: [analog-help] log format detection fails ?
Rainer Fuegenstein ([EMAIL PROTECTED]): the analog configuration is divided into two parts: 1) analog.cfg file has the following lines at the very beginning: LOGFORMAT combined LOGFILE access.log IMAGEDIR /images/ DNSLOCKFILE /tmp/dnscache.lock DNSFILE /tmp/dnscache DNS WRITE [...] 2) a temporary file is generated per site and specified on the command line: /opt/analog/analog +g/tmp/anasite.cfg this is how it looks like for the site in question: LOGFILE /web/log/tle.log LOGFILE /web/log/tle.log.*.gz HOSTNAME www.tle.com BASEURL http://www.tle.com OUTFILE /stat/doc/analog/tle.html CHARTDIR /analog/tle. LOCALCHARTDIR /stat/doc/analog/tle. 1) is the included config file processed before the main config file so that logformat combined gets read after the LOGFILE ... statements and therefore analog tries to auto-detect the format and fails ? (It didn't work when logformat combined was specified in the included config file, either). LOGFORMAT only applies to following LOGFILE lines in the same configuration file. If you want it to apply to LOGFILE lines in another configuration file (or logfiles included on the command line) use the DEFAULTLOGFORMAT command. The default configuration file (analog.cfg) is processed before any configuration files specified with +g. The mandatory configuration file (if defined at compile time) is processed last. -- Jeremy Wadsack Wadsack-Allen Digital Group + | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at |http://www.mail-archive.com/analog-help@lists.isite.net/ |http://lists.isite.net/listgate/analog-help/archives/ |http://www.tallylist.com/archives/index.cfm/mlist.7 +
