Hi,
I'm running analog 4.01 against logs from a Netscape Proxy server.
I have to manually set a LOGFORMAT as the default proxy server format
contains duplicate fields which analog doesn't like. The format I have
is:
%S - %j %u [%d/%M/%Y:%h:%n:%j %j] "%r" %j %j %c %j %b %j %j %j %j %j %t
[%j]
and it does what I require.
I've now been requested to add stats for Smartfilter, a content filter
package that operates as an add on to Netscape Proxy. The log format
remains the same except that an extra field is added at the end of each
log entry. This field is the category field (2 characters) and indicates
which of the 27 seperate filtering categories the URL shown in the log
file entry matches. It's shown as the [%j] on the format line above.
The sort of data I'll need to gather is limited to number of bytes and
the category. The URL and the requesting browser address won't be
needed. An added complication is that when a URL is matched against more
than one category, they are listed as comma seperated values
Now for the question:
Can someone suggest a way to extract the data I need, specifically, the
contents of this new field? Ideally, I'd like to be able to just have
the one pass through the logfile (50MB per day) and to create a seperate
report for the new data. The only way I can currently see to do this is
to create a seperate analog config file and specify a new LOGFORMAT that
extracts the data I need. I'd be REALLY grateful if anyone can suggest a
short cut to doing this, perhaps aliases and/or regular expressions?
[I've written a quick perl script to extract the info I need but I'd
prefer analog to do all of the reporting]
Regards
GEoff Steer
Fujitsu Australia Ltd.
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
