We have just upgraded our website to IIS 5.0. (and we love Analog!!!!)
I am merging Octobers logfiles from the old IIS 4 server with the new IIS 5
logfiles.
Analog throws out most files as broken. Looking at the log file structure
I see a subtle change :-
>From IIs 4
#Fields: date time c-ip cs-username s-sitename s-computername s-ip
cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes
cs-bytes time-taken s-port cs-version cs(User-Agent) cs(Cookie) cs(Referer)
from IIS 5
#Fields: date time c-ip cs-username s-sitename s-computername s-ip s-port
cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes
cs-bytes time-taken cs-version cs(User-Agent) cs(Cookie) cs(Referer)
You will see that the s-port field has moved from near the end in IIS 4 to
nearer the beginning (after s-ip) in the IIS 5 version.
Is this why it is broken? Perhaps you can define MS-EXTENDED_IIS4 and
MS-EXTENDED_IIS5 internally for the next release?
I guess I will have to manually define the format to read the new log
files (as in LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b)or
whatever) - there is not an example of MS-EXTENDED in the docs ;-(
To save me working this out from scratch does anyone already have that
definition ?
many thanks in advance
Andy Gillanders
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
