J�rn Poulsen wrote:
> Assume I have these two lines in the same logfile (or stdin):
>
> 1.2.3.4 - - [25/Jul/2000:16:30:01 -0000] "GET /stuff/ HTTP/1.0" 200 -
>"http://things.com/" "Mozilla/4.5 [en] (Win98; I)"
> 5.6.7.8 - - [25/Jul/2000:13:30:02 -0300] "GET / HTTP/1.1" 304 - "http://surfer.com/"
>"Mozilla/4.0 [en] (Win95; I)"
>
> Assume also that analog is running in the same timezone as the second hit
> indicates, i.e. 3 hours earlier than GMT.
>
> Now, my question is: Will these two lines both get counted as two hits
> close to 1:30pm on that Tuesday? Will analog take the "-0000" and "-0300"
> timezone specifiers into account when parsing those lines?
>
> This, of course, will have more impact for hourly reports if the two hits
> are close to midnight..
No, Analog defines CLF as:
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b)
It ignores the timezone part of the time specifier. I do not believe there is any way
to make Analog interpret timezones.
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
