Hi Carter,
I had this problem too when I started, this should help (I'm using Analog
4.11 and 4.13):
In Analog you don't have to set which logformat it's reading, you just need
to get IIS to output the right stuff, so you can remove the 'LOGFORMAT
MS-EXTENDED' in the analog.cfg file.
To set up IIS properly go in to the properties of the web site through the
Internet Service Manager (right click on the web site, click 'Properties'
Where it says 'Active Log format: W3C Extended Log File Format' click on the
'Properties' button, then on the 'Extended Properties' tab at the top of the
'Extended Logging Properties' window that pops up.
On the list that comes up choose at least 'Date' and 'Time' - this will
allow Analog to read the file (it needs the date on each line of the log).
You can choose which of the other options to use. I find Referrer quite
handy to find other sites people are coming to our site from, you can
experiment with the others to find what you want.
Anyhow, once you've made your changes, 'OK' out of everything and close the
windows. Once you have some entries in your log you should find Analog will
read the new logs without a problem. Apparently there are some applications
that can update your old logs in the third-party apps. section of the Analog
web site, but I haven't tried any of them (we hadn't been logging long
enough to make it worthwhile.)
Hopefully this will get you up and running.
Paul.
--
Paul Silver - Web Developer
[EMAIL PROTECTED]
Tel: 01273 222632
http://www.eurolinkglobal.com
-----Original Message-----
From: H. Carter Harris [mailto:[EMAIL PROTECTED]]
Sent: 30 January 2001 21:26
To: [EMAIL PROTECTED]
Subject: [analog-help] Analog LOGFORMAT for IIS
I am running IIS 4 and creating logfiles for my website. I want to be able
to use Analog to do a little analysis on these files. IIS is writing the
logfiles in W3C extended format.
Based on what I read in the Analog documentation, I think I need a LOGFORMAT
record to get it to recognize the Microsoft version of W3C. I tried
LOGFORMAT MS-EXTENDED and I get the following when I run analog:
analog: analog version 4.90beta1/win32
analog Warning C: Ignoring corrupt format line in logfile
analog ...cont..: <reason: time without date or vice versa>
<For help on all errors and warnings, see docs/errors.html>
analog: Waring L: Large number of currupt lines in logfile ex010129.log: try
different LOGFORMAT
Current logfile format:
#Fields:\n
#%j\n
analog: Warning R: Turning off empty time reports ...
My logfile looks like this:
#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 2001-01-29 15:46:54
#Fields: time c-ip cs-method cs-uri-stem sc-status
15:46:54 216.78.145.215 GET /Default.asp 302
15:46:54 216.78.145.215 GET /login.asp 200
15:46:54 216.78.145.215 GET /technettn.css 200
15:46:54 216.78.145.215 GET /i/bgc.gif 200
15:47:04 216.78.145.215 POST /default.asp 200 ...
Even though I'm specifying the MS-EXTENDED logformat, do I need to put in
something else to identify the file format? I edited the analog.cfg file
what was part of the download and changed the file name and added the
LOGFORMAT record. It now looks like this (after the comments):
LOGFORMAT MS-EXTENDED
LOGFILE ex010129.log # to set where your logfile lives
# LOGFILE logfile.log
# OUTFILE outfile.html
HOSTNAME "[TechNet of Tennessee, Inc.]"
# REQINCLUDE pages
REQLINKINCLUDE pages ... and so on.
Any help would be greatly appreciated. - Carter
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
