Why not something more like this?
LOGFORMAT (%s - - [%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b [%j] [%j] [%j] %j)
Stephen Turner wrote:
> On Tue, 16 May 2000, Alejandro Fernandez wrote:
>
> > Hi,
> >
> > I'm still stuck trying to get analog to parse realmedia logs:
> >
> > Lines like this:
> > 205.188.208.199 - - [15/May/2000:21:47:36 +0100] "GET
>ramgen/accountingweb/tx_land.rm
> > HTTP/1.0" 200 317 [UNKNOWN] [UNKNOWN] [UNKNOWN] 114 0 0 0 0 314
> >
> > Which I'm attempting to give to analog with this:
> > LOGFORMAT (%j %j %u [%d/%M/%Y:%h:%n:%j] %j %r %j %c %b %j)
> >
> > But it won't accept it. Is there anything I've overlooked?
> >
>
> There seem to be two spaces after the date in the example line.
>
> --
> Stephen Turner http://www.statslab.cam.ac.uk/~sret1/
> Statistical Laboratory, Centre for Mathematical Sciences,
> Wilberforce Road, Cambridge, CB3 0WB, England
> "8th March 2000. National No Smoking Day. Ash Wednesday." (On a calendar)
>
> ------------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe" in the main BODY OF THE MESSAGE.
> List archived at http://www.mail-archive.com/[email protected]/
> ------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
