You can also run the CONVLOG utility to convert the logfiles to NCSA
format, which includes a date.
Unfortunately, if you have been creating weekly logs, IIS is supposed to
add a new #Date field each day, but it doesn't seem to do this reliably,
so you may end up with a weeks worth of log entries all having the date
of the first date in the week.
Aengus
______________________________ Reply Separator _________________________________
Subject: Re: [analog-help] analog3.11 -- Win32 : startup problems..
Author: [EMAIL PROTECTED] at Internet
Date: 3/31/99 1:46 AM
Analog isn't going to accept a format that doesn't have both the date and
time in each log entry. It even tells you that when you run it:
>analog: Warning C: (reason: time without date or vice versa)
I'll leave the explination about why that is so to others. The only thing
you can do about it is to edit the log files to insert the date on each
line and adjust the #Fields lines accordingly.
Jason
On 3/29/99 1:16 AM Gregory Guthrie ([EMAIL PROTECTED]) wrote:
>Sorry for the request.. but I can't get past logfile compatibility on an
>NT/IIS system.
>
>We already run this on two suns and a linux, and want to setup on an NT
>running IIS;
> thanks for a great program.
>
>But on the NT I can't get it to like the logfile format.
>
>the logfiles look like this:
>----------------------
>[analog]:[46] head cs440.log
>#Software: Microsoft Internet Information Server 4.0
>#Version: 1.0
>#Date: 1998-07-17 15:56:57
>#Fields: time c-ip cs-method cs-uri-stem sc-status
>15:56:57 192.103.45.4 GET /Default.htm 200
>15:56:57 192.103.45.4 GET /samples/images/backgrnd.gif 304
>.....
>----------------------
>I run "analog -G +gcs440.cfg"
>and get:
>----------------------
>analog: Warning C: Bad argument in configuration command: ignoring it:
> LOGFORMAT %h:%n:%j %S %j %r %c
> (For help on all errors and warnings, see docs/errors.html)
>analog: Warning C: (reason: time without date or vice versa)
>F: Closing configuration file cs440.cfg
>F: Opening lang/uk.lng as language file
>F: Closing language file lang/uk.lng
>F: Opening domains.tab as domains file
>F: Closing domains file domains.tab
>F: Opening cs440.log as logfile
>F: Detect that it's in Microsoft's extended format
>C: 15:56:57 192.103.45.4 GET /Default.htm 200
>C: 15:56:57 192.103.45.4 GET /samples/images/backgrnd.gif 304
>C: 15:56:57 192.103.45.4 GET /samples/images/h_logo.gif 304
>C: 15:56:57 192.103.45.4 GET /samples/images/SPACE.gif 304
>----------------------
>
>and get this (w/ -settings):
>
>LOGFORMAT (%h:%n:%j %S %j %r %c)
>LOGFILE cs440.log
>
>----------------------
>This is analog version 3.11/Win32
>For more information on analog see docs/Readme
>http://www.statslab.cam.ac.uk/~sret1/analog/
>
>...
>Reading logfiles:
> cs440.log
> Logfile format:
> <Automatic detection>\n
>...
>----------------------------------------------------------------------------
>----------------
>and then it doesn't like anything in the logfile.
>
>Questions: *****************
>Why doesn't it seem to be taking my LOGFORMAT command?
>why doesn't it like it?
>if it recognizes Microsoft format, why doesn't it like it?
>
>Confession; IIS made seperate files for ech cay, I just concatenated them
>all together , so clearly I will lose date information here, but didn't
>konow what else to do; suggestions? We will switch to the "extended
>format", but I'd love to get the data from these files first.
>
>
>Thanks for any help.
>
>Gregory Guthrie
>--------------------------------------------------------------------
>This is the analog-help mailing list. To unsubscribe from this
>mailing list, send mail to [EMAIL PROTECTED]
>with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
>--------------------------------------------------------------------
-----------------
[EMAIL PROTECTED]
-----------------
Dr. Seuss books . . . can be read and enjoyed on several levels. For
example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
as a searing indictment of the narrow-minded binary counting system.
-- Peter van der Linden, Expert C Programming, Deep C Secrets
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
Received: from nmho05u.rohmhaas.com ([136.141.252.23]) by ima1.rohmhaas.com with
SMTP
(IMA Internet Exchange 3.11) id 001885BB; Wed, 31 Mar 1999 01:53:51 -0500
Received: by nmho05u.rohmhaas.com; id BAA13508; Wed, 31 Mar 1999 01:56:00 -0500
(EST)
Received: from mb3.mailbank.com(209.133.104.8) by nmho05u.rohmhaas.com via smap
(3.2)
id xma013501; Wed, 31 Mar 99 01:55:33 -0500
Received: from gateway1.isite.net (gateway1.isite.net [198.207.204.66])
by mb3.mailbank.com (8.9.1a/8.9.1) with ESMTP id WAA14813
for <[EMAIL PROTECTED]>; Tue, 30 Mar 1999 22:53:16 -0800
Received: from proxy1.noc.isite.net ([172.16.1.11] (may be forged)) by
gateway1.isite.net (8.8.6/8.8) with ESMTP id WAA18226; Tue, 30 Mar 1999 22:47:19
-0800 (PST)
Received: from mail2.noc.isite.net (mail2.noc.isite.net [172.16.1.22]) by
proxy1.noc.isite.net (8.8.6/8.8) with ESMTP id WAA24900; Tue, 30 Mar 1999
22:47:18 -0800 (PST)
Received: (from majordom@localhost) by mail2.noc.isite.net (8.8.6/8.8) id
WAA06369 for analog-help-localoutlist; Tue, 30 Mar 1999 22:47:00 -0800 (PST)
Received: from proxy1.noc.isite.net (proxy1.noc.isite.net [172.16.1.11]) by
mail2.noc.isite.net (8.8.6/8.8) with ESMTP id WAA06365 for
<[EMAIL PROTECTED]>; Tue, 30 Mar 1999 22:46:55 -0800 (PST)
Received: from gateway1.isite.net (gateway1.isite.net [198.207.204.66]) by
proxy1.noc.isite.net (8.8.6/8.8) with ESMTP id WAA24896 for
<[EMAIL PROTECTED]>; Tue, 30 Mar 1999 22:46:55 -0800 (PST)
Received: from www.minbar.com (jlinhart.erols.com [207.96.104.75]) by
gateway1.isite.net (8.8.6/8.8) with ESMTP id WAA18220 for
<[EMAIL PROTECTED]>; Tue, 30 Mar 1999 22:46:52 -0800 (PST)
Received: from [192.168.1.7] (local6.minbar.com [192.168.1.7])
by www.minbar.com (8.8.5/8.8.5) with SMTP id BAA21941
for <[EMAIL PROTECTED]>; Wed, 31 Mar 1999 01:46:51 -0500
Message-Id: <>
Subject: Re: [analog-help] analog3.11 -- Win32 : startup problems..
Date: Wed, 31 Mar 1999 01:46:52 -0500
x-mailer: Claris Emailer 2.0v3, January 22, 1998
From: Jason Linhart <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Sender: [EMAIL PROTECTED]
Precedence: bulk
Reply-To: [EMAIL PROTECTED]
