analog is having trouble opening these logs in W3SVC35 format. It seems to
read the files with the LOGFORMAT MS-Extended in the config file, but errors
occur as follows:
AnalogTemp\analog 4.16>analog
log: analog version 4.16/Win32
log: Warning L: Large number of corrupt lines in logfile
:\WEBSITELOGS\ex010222.log: try different LOGFORMAT
For help on all errors and warnings, see docs/errors.html)
Current logfile format:
#Fields:\n
#%j\n
%Y-%m-%d%w%h:%n:%j%w%S%w%j%w%j%w%j%w%v%w%j%w%r%w%q%w%c%w%j%w%b%w%j%w%T%w%j%w
%j%w%A%w%j%w%f\n.
This is the header and first line of one file:
#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 2001-02-24 00:18:00
#Fields: date time c-ip cs-username s-sitename s-computername s-ip cs-method
cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes cs-bytes
time-taken s-port cs-version cs(User-Agent) cs(Cookie) cs(Referer)
2001-02-24 00:18:00 198.139.155.30 - W3SVC35 VNT8 205.178.180.184 HEAD
/Index.html - 200 0 305 96 234 80 HTTP/1.1 InternetSeer.com - -
If I remove LOGFORMAT I get this:
D:\AnalogTemp\analog 4.16>analog
analog: analog version 4.16/Win32
analog: Warning F: Can't auto-detect format of logfile
C:\WEBSITELOGS\ex010222.log: ignoring it
(For help on all errors and warnings, see docs/errors.html)
Any suggestions would be appreciated. I've tried several ideas from the
FAQ's and mail history, but no luck.
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
