[EMAIL PROTECTED] wrote:
> Using IIS 4.0 log files the first portion of the logfile is
> #Fields: date time c-ip cs-username s-sitename
> as in this entry (no username)
> 2001-01-03 16:05:06 165.225.70.55 - W3SVC1
> or
> 2001-01-03 16:05:25 172.16.7.251 c44560 W3SVC1
> (this is user C44560)
>
> Recently, our network people had to change our internal intranet IDs to be
> the persons full name (and sometimes middle initial - I know its cumbersome
> but that's what we now have ....)
> e.g.
> 2001-01-03 16:05:10 172.16.6.240 John V Speer W3SVC1
>
> Having embedded spaces in the user name seems to break Analog 4.13. It
> either reports an unusually high number of corrupt log entries or reports
> the user name as just John (from the above example). Additional side
> effects are not limited to no longer understanding the Operating System
> etc)
>
> Analog is presumably counting the spaces as delmiters and hence getting
> very confused indeed!!!
Analog looks for the first match of a delimiter. Since spaces are the delimiter
in your logfile IIS should really be quoting these usernames that have spaces
in them.
> An suggestions to solve this problem?
You could write a custom logformat, using 'W3SVC1' as the delimiter after the
user name (%u) but that would add a ' ' to the end of every username.
> (I could parse the logfile before giving it to Analog and put everything
> after the IP address and before W3SVC1 in quotes I suppose although I would
> prefer not to.... - does Analog prefer single or double quotes if I have to
> do this?)
This would be the better solution. Should be easy with Perl or sed (not that
these are standard IIS tools, but ActivePerl is easy to install).
I would also consider sending a bug report to Microsoft about this.
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
