Julien wrote:
>> I'm using Apache web server, here is my configuration :
>>
>> LogFormat "%h %t %{User-agent}i %b" agent
>>
>> Here is a sample of my lof file :
>> 10.2.1.2 [13/Mar/2001:10:19:14 +0100] Mozilla/4.0 (compatible;
>> MSIE 5.5; Windows 98) 2880
>> 10.2.1.2 [13/Mar/2001:10:19:14 +0100] Mozilla/4.0 (compatible;
>> MSIE 5.5; Windows 98) -
First, this is a bad logformat: There is no simple way for Analog (or
any other log parser) to distinguish the end of the User-agent string.
You should put this in quotes like this:
LogFormat "%h %t \"%{User-agent}i\" %b" agent
>> %S [%d/%M/%Y:%h:%n:%j] %B %b\n
The corresponding LOGFORMAT command for Analog would then be
LOGFORMAT (%S [%d/%M/%Y:%h:%n:%j] "%B" %b)
Finally, this log format isn't very useful without request information
unless you have a separate log with requests. If that's so, then you
will need to use Analog's "*" notation to mark fields (like the host)
that exists in both files, otherwise they will get double counted.
Something like this:
LOGFORMAT (%*S [%d/%M/%Y:%h:%n:%j] "%B" %*b)
More information on log formats is available in the Analog documentation
folder. See docs/logfmt.html.
--
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
