Markus Will wrote:
> my Provider delivers logfiles in the following format.
> I could'nt figure out the LOGFILE FORMAT in analog.cfg.
> analog says: Warning L: Large number of corrupt lines in logfile
>
> 195.93.66.11 - - [05/Mar/2001:14:45:06 +0100] "GET / HTTP/1.0" 200 1698
> www.circles-of-confusion.de "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0;
> Windows 98; DigExt)"
> 195.93.66.13 - - [05/Mar/2001:14:45:09 +0100] "GET /Bilder/logo_Index.gif
> HTTP/1.0" 200 1415 www.circles-of-confusion.de
> "http://www.circles-of-confusion.de/" "Mozilla/4.0 (compatible; MSIE 5.0;
> AOL 5.0; Windows 98; DigExt)"
This looks like Combined format with a virtual host stuck between the
byte count and the referrer. Taking the sample LOGFORMATs from
docs/logfmt.html and adding %v in the right place, this should work
(each on one line):
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b %v "%f" "%B")
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b %v "%f" "%B")
--
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------
