Thanks for the explanation. That helps.
Analog 3.11 does have the section about MS IIS logfiles. It says to use
MICROSOFT-NA. It also says "There are also various third party extensions
to the Microsoft format to include, for example, the browser and referrer.
Analog can't automatically diagnose these: you need to write a logformat
string for them." Here is where I get stuck.
An example of my log file.
36.22.0.198, -, 2/22/99, 10:48:10, W3SVC, EHSERV, 169.237.132.80, 200, 292,
3677, 200, 0, GET, /ehlogoc.gif, -,
169.237.132.80, -, 2/22/99, 10:55:49, W3SVC, EHSERV, 169.237.132.80, 0,
330, 72, 304, 0, GET, /index.htm, -,
169.237.132.80, -, 2/22/99, 10:56:44, W3SVC, EHSERV, 169.237.132.80, 13009,
283, 111, 403, 5, GET, /ANALOG311/IMAGES, -,
206.19.211.20, -, 2/22/99, 11:00:35, W3SVC, EHSERV, 169.237.132.82, 942,
237, 4361, 200, 0, GET, /plscripts/treefail/webbbs/config.pp, ?read=1105,
128.32.159.217, -, 2/22/99, 11:28:20, W3SVC, EHSERV, 169.237.132.80, 20,
298, 2887, 200, 0, GET, /staff/index.htm, -,
161.50.48.2, horttrn, 2/22/99, 23:33:38, W3SVC, EHSERV, 169.237.132.80,
431, 329, 176, 401, 5, GET, /ENH125/grhenv/10irrig.htm, -,
161.50.48.2, wildgr, 2/22/99, 23:40:19, W3SVC, EHSERV, 169.237.132.80, 431,
335, 176, 401, 5, GET, /ENH125/grhenv/10irrig.htm, -,
169.237.16.43, enh125, 2/23/99, 8:09:19, W3SVC, EHSERV, 169.237.132.80,
72594, 457, 72, 304, 0, GET, /ENH125/illustr/fertig2.jpg, -,
Gee, this list is a great help. Thanks.
At 2/24/99 09:39 AM, you wrote:
>On 2/24/99 12:24 PM Glen W. Forister ([EMAIL PROTECTED]) wrote:
>
>>That may be clear to Chris, but I'm trying to figure this out and it
>>doesn't compute. Why the six format lines when there is only one format to
>>that single line?? Also, in my case (IIS) I have to get the browser and
>>referrer in the format string. Does that mean a format line for each the
>>browser and the referrer when they occur in each line of the output???
>>There should be one line to define the format of an output line to my
>>thinking.
>
>Microsoft IIS logs should be handled automaticaly, you shouldn't need any
>special LOGFORMAT commands.
>
>There are two different LOGFORMAT commands: DEFAULTLOGFORMAT and
>LOGFORMAT. DEFAULTLOGFORMAT is used for input files where no LOGFORMAT
>was specified. This happens on the Macintosh for drag and drop logs and
>on Unix when a log is specified on the command line. LOGFORMAT is for
>logs specified in the configuration file.
>
>Some log formats have variable formats, so several different LOGFORMAT
>lines are needed, one for each possible format of the log line. Any log
>format the records the full original request line, as Demon Internet
>does, will require multipule format lines because request lines can occur
>in three different formats. Apache normaly does this, as does Common Log
>Format, but WebSTAR and Microsoft IIS do not normaly have that.
>
>If you are having trouble with Microsoft IIS logs make sure you have the
>lattest version of Analog, ie. 3.1.1. There were several small bug fixes
>for Microsoft format logs in the last few releases.
>
>If you are still having trouble, could you post the first several lines
>from one of your logfiles to the list?
>
>Jason
>
>-----------------
>[EMAIL PROTECTED]
>-----------------
>Dr. Seuss books . . . can be read and enjoyed on several levels. For
>example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
>as a searing indictment of the narrow-minded binary counting system.
> -- Peter van der Linden, Expert C Programming, Deep C Secrets
>
>
>--------------------------------------------------------------------
>This is the analog-help mailing list. To unsubscribe from this
>mailing list, send mail to [EMAIL PROTECTED]
>with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
>--------------------------------------------------------------------
>
Glen Forister 530-752-4337 FAX 530-752-1819
[EMAIL PROTECTED], [EMAIL PROTECTED]
Environmental Horticulture Dept.,
University of California, Davis, CA 95616
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
