If you're trying to tell the program how the log format is, then you might
also have to tell it to watch out for the commented line that describes the
log format. I'm guessing you have one since you're runing some form of IIS
it looks like. I'm not sure how to do this with analog, but there's gotta
be a way to exclude lines which start with 'X', i.e. whatever you specify
the starting character as. Its probably in the docs somewhere. :) Also, I
think Analog is supposed to be able to pick up IIS formats, so I don't know
if you need to specify a format.
Good luck.
Nate
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ricardo Garrido
Sent: Tuesday, November 28, 2000 4:33 AM
To: '[EMAIL PROTECTED]'
Subject: [analog-help] LOGFORMAT
Hi:
I�ve got a problem with my log format. I�m trying to "tell" the program how
the format is with LOGFORMAT but it doesn�t work.
My logs are of this kind:
#Fields: time c-ip cs-method cs-uri-stem sc-status
11:48:33 170.253.132.1 GET /Default.htm 200
And i put in my analog.cfg this command:
LOGFORMAT (%h:%n:%j %S %j %r %c)
I think this is correct but... well, the warnings are:
c:\analog 4.11\analog.exe: Warning C: Ignoring corrupt format line
in logfile
c:\analog 4.11\analog.exe:...cont...: (reason: time without date or
viceversa)
c:\analog 4.11\analog.exe: Warning L: Large number of corrupt lines
in logfile
c:\logZamudio\w3svc6\ex001105.log: try different LOGFORMAT
Current logfile format:
#Fields:\n
#%j\n
* The forth line is where my log archives are.
I don�t know what i�m doing wrong.
Thanks
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
