On Sun, 12 Nov 2000, Roger Elliott, Uncommon Knowledge wrote:
> Hi
>
> I'm new to this list and was wondering if someone might be able to help.
>
> I am currently trying to configure Analog. I have a non-standard log file
> format and I have spent the last 2 days trying to write my own string. And I
> can't make it work!
> Can anyone give me the correct string for the
> following logfile format before I go completely insane (!)
>
>
> 63.80.38.10 - - [20/Oct/2000:02:21:38 +0100] "GET /UncommonKnowled/
> HTTP/1.0" 200 12283 "FROM
> http://www.goto.com/d/search/p/clickheretofind/;$sessionid$TXFAYDAABUMBZQFIE
> E4QPUQ?type=bottombar&Keywords=self-esteem%2F&x=13&y=9" "Mozilla/4.0
> (compatible; MSIE 5.0; Windows 98; DigExt)"
> 63.80.38.10 - - [20/Oct/2000:02:21:40 +0100] "GET
> /UncommonKnowled/images/logo1.9.gif HTTP/1.0" 200 8847 "FROM
> http://www.self-confidence.co.uk/" "Mozilla/4.0 (compatible; MSIE 5.0;
> Windows 98; DigExt)"
>
This seems to be the same as combined format, but with the extra word FROM
before the referrer. So you can just copy the combined format strings from
docs/logfmt.html#combinedfmtex but add the extra 'FROM ' just before the %f.
--
Stephen Turner http://www.statslab.cam.ac.uk/~sret1/
Statistical Laboratory, Wilberforce Road, Cambridge, CB3 0WB, England
"The new operating system will recover more easily from system crashes."
(Microsoft, aiming high with Windows Millennium)
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
