Hiya John,

On Wed, 2 February 2000 22:30, John Moylan wrote:

> I'm having awful problems getting analog4.02 to work. I'm
[clip]
> The Logformat in my httpd conf is:
> LOGFORMAT "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"\"%{Cookies}i\"" combined

That's the normal combined format with the addition of the Cookies on the
end, yeah?  Um, did you intend to leave no space between the trailing quote
of the User-Agent and the opening quote of the Cookies?

> an example line from the log file is:
> 169.144.161.140 - - [15/jan/2000:04:10:29 +0000] "GET /aertel/GM249257.cdf
HTTP/1.1" 404 225 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 98;
DigExt)""-"

Okay, so no cookie on that line, but the double quotes are there.

> When I run analog I get:
> Can't auto-detect format of logfile logfile1: ignoring it

Analog couldn't fit the given LOGFORMAT to the line...

> I have LOGFORMAT set up in analog.cfg as:
> LOGFORMAT (%S %j %j [%d:%M:%Y:%j %j] \%j "%r\" %j %b %j)

You're asking it to pick out the host, day, month, year, file requested and
bytes transferred; ignoring everything else.

The only thing I can see that might be wrong is where you're picking out the
filename.  The way you've got it there, it'll try to pick out (GET
/aertel/GM249257.cdf HTTP/1.1) as the filename --- that's probably where
it's getting upset.  If you look at the example LOGFORMAT for the combined
log in the manual:
| LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B")
you'll see that the construct for picking out the filename explicitly
eliminates the GET or POST with %j%w.

So try changing you're LOGFORMAT to:
LOGFORMAT (%S %j %j [%d:%M:%Y:%j %j] \%j "%j%w%r\" %j %b %j)
and see if that matches.

Hope that helps.
-- 
Geoff Riley
[EMAIL PROTECTED]

------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------

Reply via email to