On 4/14/99 4:10 PM Keith Purtell ([EMAIL PROTECTED]) wrote:

>Does anyone work regularly with Netscape logs, who could advise me about the
>mandatory header?
>I keep getting messages about a large number of corrupt lines. Numerous
>experiments with (and without) log header and LOGFORMAT commands in
>analog.cfg file but same error message, generates a blank report. Tried the
>analog help files as well as numerous online info sources. Here are five
>lines from top of my log file ...
>
>format=%Ses->client.ip% [%SYSDATE%] "%Req->reqpb.clf-request%"
>%Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%
>209.242.91.175 - - [09/Apr/1999:08:44:04 -0500] "GET / HTTP/1.0" 200 7514
>209.242.91.175 - - [09/Apr/1999:08:44:04 -0500] "GET
>/pacsoft/_themes/blends/blegtext.gif HTTP/1.0" 304 0
>209.242.91.175 - - [09/Apr/1999:08:44:04 -0500] "GET
>/pacsoft/_derived/index.htm_cmp_blends010_bnr.gif HTTP/1.0" 304 0
>209.242.91.175 - - [09/Apr/1999:08:44:04 -0500] "GET
>/pacsoft/_themes/blends/blesepa.gif HTTP/1.0" 304 0
>
>I also tried using a variety of LOGFORMAT commands from this forum's e-mail
>archive. No luck.

Those lines look alot like NCSA Common Log format. If you put:

LOGFORMAT COMMON

in your configuration file, before the LOGFILE command, it really ought 
to work.

Details follow, ignore if they don't make sense.

The format= line is a Netscape server log format command. When Analog 
sees that it is going to read it and assume the log follows the specified 
format. Apparently, Netscape puts "- -" in after the IP address even when 
the user name field is suppressed. The "normal" Netscape format is:

format=%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] 
"%Req->reqpb.clf-req
uest%" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%

Which gives lines that look like:

137.189.4.10 - - [11/Apr/1999:10:17:33 +0000] "GET /soft/easyserve.html 
HTTP/1.0" 200 4819

When the auth-user field is turned off Analog expects those two '-'s to 
either be in the format line or not in the log lines. Either that 
assumtion is wrong or something even more complex is going on.

Good Luck
Jason

-----------------
[EMAIL PROTECTED]
-----------------
Dr. Seuss books . . . can be read and enjoyed on several levels. For
example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
as a searing indictment of the narrow-minded binary counting system.
  -- Peter van der Linden, Expert C Programming, Deep C Secrets


--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

Reply via email to