On Tue, 24 Apr 2001, [EMAIL PROTECTED] wrote:
>
> I found the problem, but still would like to know "why".
>
> Some of the records don't have a username since they are public requests, by
> removing the space between the - and the %u it started working.
>
> LOGFORMAT (%S %v -%u [%d/%M/%Y:%h:%n:%j] "%j %r" %c %b "%f" "%B")
>
First, your fix is wrong, because when the user names are present, they will
acquire a spurious space at the beginning. You need two LOGFORMAT lines.
> However, ANALOG was putting the asterick directly in line with the dash in the
> time zone information when you were telling me the time zone wasn't the trouble.
>
> Here is a sampling of some of the records that were causing the trouble:
>
> 38.152.44.199 www.simsware.com - [05/Oct/2000:21:22:47 -5] "GET /bottom.shtm" 200
>764 " " "Mozilla/4.75 [en] (Windows NT 5.0; U)"
> 38.152.44.199 www.pcpaaa.org - [05/Oct/2000:21:23:00 -5] "GET /" 200 199 " "
>"Mozilla/4.75 [en] (Windows NT 5.0; U)"
> 216.34.121.67 www.nevets.net - [05/Oct/2000:21:30:56 -5] "GET /shareware/sware.htm"
>404 145 "http://www.nevets.net/index.htm" "Mozilla/2.0 (compatible; Ask Jeeves)"
> proxy.nevets.net www.simsware.com - [05/Oct/2000:21:31:22 -5] "GET /" 200 3737 " "
>"Mozilla/4.75 [en] (Windows NT 5.0; U)"
>
The reason is that analog can't tell where the problem is for sure. Here it
thought that "[05/Oct/2000:21:22:47" was the user, and only noticed after
that that it was in trouble.
The documentation emphasises this:
"The second line indicates where analog first noticed a problem. (This
is usually, but not always, close to where the problem actually was!)"
> It would be nice if there was a way to route the console output with standard
> redirection, or to print the lines in error to an error file.
>
ERRFILE does this (docs/debug.html). Or rerouting standard error in the
shell.
--
Stephen Turner http://www.statslab.cam.ac.uk/~sret1/
Statistical Laboratory, Wilberforce Road, Cambridge, CB3 0WB, England
"Your account can only be used for a single internet session at any one
time and for no more than 24 hours in any one day." (NTL terms of use)
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------