I have tried all of the configurations below, but to no avail. When I try the
APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b
\"%{Referer}i\"\"%{User-Agent}i\"\%{Cookies}i\"")
Analog tells me that all the lines in my log files are corrupt
Does anyone know why?
Hiya John,
Just an extra to myprevious message in the same thread:
I forgot to say you need to eliminate the HTTP* from the end of the filename
too, so use two LOGFORMAT lines:
LOGFORMAT (%S %j %j [%d:%M:%Y:%j %j] \%j "%j%w%r%wHTTP%j\" %j %b %j)
LOGFORMAT (%S %j %j [%d:%M:%Y:%j %j] \%j "%j%w%r\" %j %b %j)
That will then match lines with the HTTP specifier as well as those without.
(I should have realised this since your example line had HTTP/1.1 on it.
Sorry.)
--
Geoff Riley
[EMAIL PROTECTED]
Hiya John,
On Wed, 2 February 2000 22:30, John Moylan wrote:
> I'm having awful problems getting analog4.02 to work. I'm
[clip]
> The Logformat in my httpd conf is:
> LOGFORMAT "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"\"%{Cookies}i\"" combined
That's the normal combined format with the addition of the Cookies on the
end, yeah? Um, did you intend to leave no space between the trailing quote
of the User-Agent and the opening quote of the Cookies?
> an example line from the log file is:
> 169.144.161.140 - - [15/jan/2000:04:10:29 +0000] "GET /aertel/GM249257.cdf
HTTP/1.1" 404 225 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 98;
DigExt)""-"
Okay, so no cookie on that line, but the double quotes are there.
> When I run analog I get:
> Can't auto-detect format of logfile logfile1: ignoring it
Analog couldn't fit the given LOGFORMAT to the line...
> I have LOGFORMAT set up in analog.cfg as:
> LOGFORMAT (%S %j %j [%d:%M:%Y:%j %j] \%j "%r\" %j %b %j)
You're asking it to pick out the host, day, month, year, file requested and
bytes transferred; ignoring everything else.
The only thing I can see that might be wrong is where you're picking out the
filename. The way you've got it there, it'll try to pick out (GET
/aertel/GM249257.cdf HTTP/1.1) as the filename --- that's probably where
it's getting upset. If you look at the example LOGFORMAT for the combined
log in the manual:
| LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B")
you'll see that the construct for picking out the filename explicitly
eliminates the GET or POST with %j%w.
So try changing you're LOGFORMAT to:
LOGFORMAT (%S %j %j [%d:%M:%Y:%j %j] \%j "%j%w%r\" %j %b %j)
and see if that matches.
Hope that helps.
--
Geoff Riley
[EMAIL PROTECTED]
You don't need anything complicated. Just use an APACHELOGFORMAT command
matching the LogFormat in your Apache httpd.conf.
--
Stephen Turner [EMAIL PROTECTED] http://www.statslab.cam.ac.uk/~sret1/
Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
"We can ask you to pay the full amount which you owe us if you:
(a) become bankrupt; or (b) die." Egg Credit Card Agreement
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
