clients are suing port 80 (?) and C-IP is the client IP number, then you might be missing that data. If not, try this:
LOGFORMAT ("%j" "%j" "%f" "%B" %j %j %j %j %j %q %r %Y-%m-%d %c %h:%n:%j %j %b %j %S)
First off all, thank you for all your help, I really appreciate it.
I tried the LOGFORMAT you sent, and it processed the WebSTARlog file without a problem. But in the report it is still showing all the stats as corrupt log file lines. Here's what it shows:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<meta name="GENERATOR" content="analog3.11/Mac">
<title>Web Server Statistics for [Farm Business Communications]</title></head>
<body>
<h1><a NAME="Top"><IMG src="./images/analogo.gif" alt=""> Web Server Statistics for</a> <a HREF="http://www.agcanada.com">[Farm Business Communications]</a></h1>
Program started at Fri, Mar 26 1999 08:39.
<br><hr>
<h2><a NAME="Rep8">General Summary</a></h2>
<p>(<b>Go To</b>: <a HREF="#Top">Top</a>: General Summary)
<p><b>Successful requests:</b> 0
<br><b>Corrupt logfile lines:</b> 24,239
<hr>
<i>This analysis was produced by <a HREF="http://www.statslab.cam.ac.uk/~sret1/analog/">analog3.11/Mac</a>.
<br><b>Running time:</b> 6 seconds.
</i>
<p>(<b>Go To</b>: <a HREF="#Top">Top</a>: <a HREF="#Rep8">General Summary</a>)
<p><a href="http://validator.w3.org/">
<img src="./images/html2.gif"
alt="HTML 2.0 Conformant!"></a>
</body>
</html>
Is there any way to tell analog to ignore the redundant data? My log file is well over 300MB so deleting it is out of the question. I would have set it up different from the start, but WEBSTAR defines the EXTENDED format as all possiblities, not elminating the duplicates, if only I'd known better.
Thanks again,
Kelly
Farm Business Communications
www.agcanada.com
-------------------------------------------------------------------- This is the analog-help mailing list. To unsubscribe from this mailing list, send mail to [EMAIL PROTECTED] with "unsubscribe analog-help" in the main BODY OF THE MESSAGE. --------------------------------------------------------------------
