Harry Lebowitz wrote:
>Here is my present format statement in my analog.cfg file, can someone
>help me change it so it will analyze my typical log entries below
>
>LOGFORMAT (%s %j %j [%d/%M/%Y:%h;%j:%j %j] "%j%w%r%wHTTP%j" %c %j
>"%j"
You need to close your parentheses. When I add the closing paranthesis, I
get the following error message:
C:\ANALOG\ANALOG.EXE: ...cont..: (reason: time without date or vice versa)
Let's see, you've got ;%j for the minutes in the time section. Fix that, and
we've got
LOGFORMAT (%s %j %j [%d/%M/%Y:%h:%n:%j %j] "%j%w%r%wHTTP%j" %c %j "%j")
Fix that, and now I get a star just before the response code - sure enough,
you have 2 spaces in your LOGFORMAT, only one in the logfile
LOGFORMAT (%s %j %j [%d/%M/%Y:%h:%n:%j %j] "%j%w%r%wHTTP%j" %c %j "%j")
Now we encounter a problem because your first log line one has one quoted
string at the end, and the others have two. But it doesn't really matter,
because you're throwing evertything away after the response code anyway, so
LOGFORMAT (%s %j %j [%d/%M/%Y:%h:%n:%j %j] "%j%w%r%wHTTP%j" %c %j)
will do nicely, though I'd probably recommend
LOGFORMAT (%s %j %j [%d/%M/%Y:%h:%n:%j %j] "%j%w%r%wHTTP%j" %c %b %j)
instead
Better yet, delete that malformed first line, and you don't need a LOGFORMAT
statement at all
>38.32.10.81 - - [19/Jul/2000:00:00:00 +0500] "GET
>/er/box/fcsts/BOSZFPBOX HTTP/1.0" 200
>5590 ""
>63.140.184.164 - - [19/Jul/2000:00:00:01 +0500] "HEAD /er/archive.htm
>HTTP/1.0" 404 0 ""
>"DaviesBot 1.7 (wwww.wholeweb.net"
>208.231.154.29 - - [19/Jul/2000:00:00:01 +0500] "GET
>/cgi-bin/mgetmetar.pl?cccc=KFDY
>HTTP/1.1" 500 226 "" "Mozilla/2.0 (compatible; MSIE 3."
>207.244.124.104 - - [19/Jul/2000:00:00:01 +0500] "GET
>/er/box/fcsts/BOSTORBOS.html
>HTTP/1.0" 200 901 "" "Wget/1.5.3"
>204.123.28.10 - - [19/Jul/2000:00:00:01 +0500] "GET
>/graphics/buttons/beginning.gif HTTP/1.0"
>200 659 "" "Mercator-1.0"
Aengus
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------
