Thanks. I tried that but still can't get this to work right.
I now have in the config
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%B" "%f")
But Analog still says
C:\ANALOG4\ANALOG.EXE: Warning L: Large number of corrupt lines in logfile
cork.log: try different LOGFORMAT
(For help on all errors and warnings, see docs/errors.html)
Current logfile format:
%S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%B" "%f"\n
What is the difference between this, which does not work
1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:29 -0800] "GET
/ HTTP/1.1" 200 4298 "Mozilla/4.0 (compatible; MSIE 5.0; MSN 2.6; Windows
98; DigExt)" "http://recorker.com/"
1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:30 -0800] "GET
/images/bluedot.gif HTTP/1.1" 200 811 "Mozilla/4.0 (compatible; MSIE 5.0;
MSN 2.6; Windows 98; DigExt)" "http://recorker.com/"
1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:30 -0800] "GET
/images/logo.gif HTTP/1.1" 200 8371 "Mozilla/4.0 (compatible; MSIE 5.0; MSN
2.6; Windows 98; DigExt)" "http://recorker.com/"
And this older log, which does
ppp-006.m2-1.sub.ican.net - - [05/Dec/1999:05:35:16 -0800] "GET
/kelownadays/ HTTP/1.0" 200 10617 "-"
"http://www.metacrawler.com/directory/Regional/Canada/"
ppp-006.m2-1.sub.ican.net - - [05/Dec/1999:05:35:17 -0800] "GET /robots.txt
HTTP/1.0" 404 204 "-" "-"
host62-6-0-175.btinternet.com - - [05/Dec/1999:06:10:14 -0800] "GET
/kelownadays/images/navw.gif HTTP/1.0" 200 1842 "Mozilla/2.0 (compatible;
MSIE 3.02; Windows 3.1)" "http://rlis.com/kelownadays/marm.htm"
The second logfile runs fine without any LOGFORMAT command at all. I know I
am missing something, but I just can't see what it is. Thanks for the help.
Cate
----- Original Message -----
From: Stephen Turner <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 13, 1999 8:08 AM
Subject: Re: [analog-help] LogFormat confusion
> On Thu, 9 Dec 1999, Cate Burton wrote:
>
> > Greetings,
> >
> > Can anyone tell me the correct LOGFORMAT command for logfiles that look
like
> > this:
> >
> > 1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:29 -0800]
"GET
> > / HTTP/1.1" 200 4298 "Mozilla/4.0 (compatible; MSIE 5.0; MSN 2.6;
Windows
> > 98; DigExt)" "http://blahblah.com/"
> >
> > 1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:30 -0800]
"GET
> > /images/bluedot.gif HTTP/1.1" 200 811 "Mozilla/4.0 (compatible; MSIE
5.0;
> > MSN 2.6; Windows 98; DigExt)" "http://blahblah.com/"
> >
> > 1cust202.tnt6.boca-raton.fl.da.uu.net - - [28/Nov/1999:06:23:30 -0800]
"GET
> > /images/logo.gif HTTP/1.1" 200 8371 "Mozilla/4.0 (compatible; MSIE 5.0;
MSN
> > 2.6; Windows 98; DigExt)" "http://blahblah.com/"
> >
> > I have tried COMBINED and a variety of customized commands, and continue
to
> > have Analog complain about a large number of corrupt lines and suggest
> > trying another logformat. I understand this to be Extended Common Log
> > Format and I understand that Analog should be able to read it, but I
have
> > had no luck.
> >
>
> It's not combined format because the referrer and the browser are the
wrong
> way round.
>
> But you can copy the format for combined given in docs/logfmt.html, but
> swapping the %f and the %B.
>
> --
> Stephen Turner [EMAIL PROTECTED] http://www.statslab.cam.ac.uk/~sret1/
> Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
> "As always, it's considered good practice to temporarily disable any
> virus detection software prior to installing new software." (Netscape)
>
> ------------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
> List archived at http://www.mail-archive.com/[email protected]/
> ------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
