On Thu, 9 Dec 1999, Cate Burton wrote:
> Greetings,
>
> Can anyone tell me the correct LOGFORMAT command for logfiles that look like
> this:
>
> 1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:29 -0800] "GET
> / HTTP/1.1" 200 4298 "Mozilla/4.0 (compatible; MSIE 5.0; MSN 2.6; Windows
> 98; DigExt)" "http://blahblah.com/"
>
> 1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:30 -0800] "GET
> /images/bluedot.gif HTTP/1.1" 200 811 "Mozilla/4.0 (compatible; MSIE 5.0;
> MSN 2.6; Windows 98; DigExt)" "http://blahblah.com/"
>
> 1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:30 -0800] "GET
> /images/logo.gif HTTP/1.1" 200 8371 "Mozilla/4.0 (compatible; MSIE 5.0; MSN
> 2.6; Windows 98; DigExt)" "http://blahblah.com/"
>
> I have tried COMBINED and a variety of customized commands, and continue to
> have Analog complain about a large number of corrupt lines and suggest
> trying another logformat. I understand this to be Extended Common Log
> Format and I understand that Analog should be able to read it, but I have
> had no luck.
>
It's not combined format because the referrer and the browser are the wrong
way round.
But you can copy the format for combined given in docs/logfmt.html, but
swapping the %f and the %B.
--
Stephen Turner [EMAIL PROTECTED] http://www.statslab.cam.ac.uk/~sret1/
Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
"As always, it's considered good practice to temporarily disable any
virus detection software prior to installing new software." (Netscape)
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
