See? I told you I was missing something obvious! :)
Thanks, Jeremy!
Your help was muchly appreciated!
Tim.
> -----Original Message-----
> From: Jeremy Wadsack [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, October 10, 2000 11:58 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [analog-help] Logformat ...
>
>
>
>
> "Philip, Tim" wrote:
>
> > Given my log file and the default analog.cfg (no logformat
> specification), I
> > get exactly the same errors as if I try to specify a logformat.
> >
> > I don't recall seeing DEFAULTLOGFORMAT in the docs
> anywhere, but I just
> > tried it and my "just ignore it" logformat appears to work.
>
> docs/logfmt.html.
>
>
>
> > I just played with it some more and analog is very weird.
> If there is a
> > "logfile.log" in my directory, it processes it no matter
> what. Even if it
> > isn't listed in the config file. But if I delete it, and
> specify both a
> > logformat and a logfile, that works. Note that it must be
> deleted before it
> > will work.
>
> If you recall from your SunOS install, there are some
> defaults that Analog
> understands, that are defined in the fiel anlghead.h. On the
> Windows version,
> these are predefined, as the program is already compiled. One
> of the defaults if
> LOGFILE logfile.log. So if Analog finds 'logfile.log' in the
> current directory,
> it uses it along with any other LOGFILE commands it finds.
>
>
> > At any rate, any idea why the default "combined" format is
> bombing on those
> > extra fields?
> > > > #APACHELOGFORMAT ("%h %l %u %t \"%r\" %s %b \"%{Referer}i\"
> > > > \"%{User-Agent}i\"")
>
> Going back to read you're previous email, I see that the
> logfile lines you
> provided are not the same as the logformat you've defined
> above. Which is why
> Analog is bombing on the extra fields.
>
> > 10.10.10.19 - - [21/Sep/2000:01:11:33 -0700] "GET /webcheck.html
> > HTTP/1.0" 200 74 "-" "-" web2.qa.a.b.foobar.com - - 0
> >
> > 1.1.1.2 - - [21/Sep/2000:05:31:44 -0700] "GET
> /images/alogo.jpg HTTP/1.1"
> > 304 - "https://qa.a.foobars.com/" "Mozilla/4.0 (compatible;
> MSIE 5.5;
> > Windows NT 4.0)" qa.a.foobar.com SSLv3 RC4-MD5 0
>
> So, back to defining a logformat. I think these should work
> (you need both to
> handle HTTP < 1.0 and HTTP >= 1.0):
>
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c
> %b "%f" "%B" %j)
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B" %j)
>
> Of course, you may need to make them DEFAULTLOGFORMAT. And
> you also need to put
> *LOGFORMAT commands before LOGFILE command that need those formats.
>
> Jeremy Wadsack
> Wadsack-Allen Digital Group
>
>
> --------------------------------------------------------------
> ----------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe" in the main BODY OF THE MESSAGE.
> List archived at
http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
