"Glen W. Forister" wrote:
> Log files:
> The indiscriminate use of %j for junk still doesn't make sense to me. How
> do you know what to identify as junk?
As Stepehn said, anyhting that analog does not know how to process or you don;t
want analog to process. In otherwords, put in the analog variables for
everything in the variable list that exists in your log files, then fill in the
rest of the fields with junk. If you're wondering how to determine what a field
is, just consider that what ever character follows the variable (i.e. the
comma %j, ) is the delimiter and analog looks for the FIRST instance of this.
> In the following response you
> formatted this output below with the following format statement.
>
> 206.19.211.20, -, 2/22/99, 11:00:35, W3SVC, EHSERV, 169.237.132.82, 942,
> >Try this LOGFORMAT command
> >LOGFORMAT %S, %u, %m/%d/%y, %h:%n:%j, %j, %j, %j, %b, %j, %j, %c, %j, %j,
> %f, %q
>
> That means something obvious like an IP number is junk? also the domain
> name (EHSERV)? I thought that might be %v or %f?
As I said, I don't know which IP number is the %S host making the request (I
made a gues based on the lines you gave me). I don't know what the other IP
number is, unless it's the IP number of the server which should only matter if
you're running a multi-homed site and thats a whole new bag of worms.
The domain name is probably the same for every entry in your log. If not then,
yes you would use %v (but I haven't even looked into virtual hosts yet).
>
> I assume I will eventually see something in the %u space? If not what is
> the user?
Only if you have secure connections on your site. IIS uses the user field to
store the name of a user, but that only works if the user is registered in the
user manager that the web server references. If you're using POP
authentication, then theortically this would show the user name. I've heard it
doesn't alway work in practice. If you're not using POP authentication then
this could also be junk.
>
> I have 5 web sites on my server so W3SVC%J should be used I guess instead
> of %j.
The only reason to use W3SVC%j would be if the W3SVC part of the log file entry
in someway specified the format. (Like Jason's solution for Chris's multi-line
log entries.) Since the format is entirely based on comma-separated values, you
can just use %j for the whole field.
> What do I need to do to include the other web sites in the logs?
> Is that an IIS issue? There is only one setting there either on or off
> with variables in there as to size of file or time.
>
Each domain on your server probably generates logs in its own director. To
include these either create a configuratio file for each that generates it's
own report, or in you configuration file for the single log (if you REALLY want
to put all domains in one report) you would specify all directories in your
LOGFILE configration option, something like:
LOGFILE
C:\Winnt\Logfiles\W3SVC1\*.log,C:\Winnt\Logfiles\W3SVC2\*.log,C:\Winnt\Logfiles\W3SVC3\*.log,C:\Winnt\Logfiles\W3SVC4\*.log,C:\Winnt\Logfiles\W3SVC5\*.log
>
> Sorry if I'm dense. I am trying to get the info out of the whole.htm file.
>
No, you're asking really good questions. I'm sure you're not the only one who
gets confused by these things.
>
> Glen Forister 530-752-4337 FAX 530-752-1819
> [EMAIL PROTECTED], [EMAIL PROTECTED]
> Environmental Horticulture Dept.,
> University of California, Davis, CA 95616
>
> --------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
> --------------------------------------------------------------------
HTH
Jeremy Wadsack
The Flagstaff Link
http://www.flagstaff.net/
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
