On 4/14/99 10:36 PM [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote:
>I have problem with the getting the output from this logfile. Please help
>by specifying the log format.
>cheers.
>Regards
>Lyvian.
>
>here are the top ten lines of the logfile :
>
>10.2.4.3 - admin [06/Jan/1999:15:22:55 +0800] "GET
>/admin-serv/bin/index?empty HTTP/1.0" 200 85 - { - }
>10.2.4.3 - - [06/Jan/1999:15:22:37 +0800] "GET / HTTP/1.0" 401 223 - { - }
>10.2.4.3 - admin [06/Jan/1999:15:22:41 +0800] "GET / HTTP/1.0" 302 0 - { -
>}
>10.2.4.3 - admin [06/Jan/1999:15:22:46 +0800] "GET /admin-serv/bin/index
>HTTP/1.0" 200 432 - { - }
>10.2.4.3 - admin [06/Jan/1999:15:22:51 +0800] "GET
>/admin-serv/bin/index?load HTTP/1.0" 200 4236 - { - }
>10.2.4.3 - admin [06/Jan/1999:15:23:22 +0800] "GET
>/admin-serv/icons/clst_off.gif HTTP/1.0" 200 1274 - { - }
>10.2.4.3 - admin [06/Jan/1999:15:23:18 +0800] "GET
>/admin-serv/icons/user_off.gif HTTP/1.0" 200 1236 - { - }
>10.2.4.3 - admin [06/Jan/1999:15:23:13 +0800] "GET
>/admin-serv/icons/pref_off.gif HTTP/1.0" 200 1261 - { - }
>10.2.4.3 - admin [06/Jan/1999:15:23:09 +0800] "GET
>/admin-serv/icons/title2.gif HTTP/1.0" 200 2564 - { - }
>10.2.4.3 - admin [06/Jan/1999:15:23:00 +0800] "GET
>/admin-serv/icons/suite2.gif HTTP/1.0" 200 1775 - { - }
That looks just like NCSA Common format with some extra stuff at the end
of the line. Since I don't know what the extra "- { - }" means, we will
tell Analog to just ignore it.
Try:
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b %j)
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r" %c %b %j)
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%r" %c %b %j)
Jason
-----------------
[EMAIL PROTECTED]
-----------------
Dr. Seuss books . . . can be read and enjoyed on several levels. For
example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
as a searing indictment of the narrow-minded binary counting system.
-- Peter van der Linden, Expert C Programming, Deep C Secrets
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
