Behrendt, Jan, NMG-MR wrote:
> Hi,
>
> thanks for your answer. It helped me a lot, but it also lead me to the next
> problem...
> I reported the error (missing quotes around strings) to BEA who sent me a
> patch. Now my logs look like this:
>
> #Version: 1.0
> #Fields: date time c-ip cs-username cs-method cs-uri-stem sc-status
> cs-bytes cs-version cs(User-Agent) cs(Referer)
> #Software: WebLogic
> 2001-05-18 11:08:37 178.194.48.186 - GET
> /mediadb/menu.html 304 - - "Mozilla/4.73 [de] (WinNT;
> U)" "http://unix13:15751/links/links1.html";
> 2001-05-18 11:08:37 178.194.48.186 - GET
> /mediadb/CSS/CatalogueCSS.css 304 - - "Mozilla/4.73 [de]
> (WinNT; U)" -
> ...
>
> I did not specify a LOGFORMAT in analog.cfg. Analog detects W3C extended
> format, but still reports errors. I turned DEBUG MODE on, this is the
> output:
>
> F: Detect that it's in W3 extended format
> ./analog: Warning M: Logfile /home/beh09/download/analog-5.0/test.log
> contains
> lines with no bytes: byte counts may be low
> (For help on all errors and warnings, see docs/errors.html)
> C: 2001-05-18 11:08:37 178.194.48.186 - GET
> /mediadb/CSS/CatalogueCSS.css 304 - - "Mozilla/4.73 [de]
> (WinNT; U)" -
> C:
> ...
> S: Corrupt lines: 30
> ./analog: Warning L: Large number of corrupt lines in logfile
> /home/beh09/download/analog-5.0/test.log: try different LOGFORMAT
> Current logfile format:
> #Fields:<W3 extended format string>\n
> #%j\n
> %Y-%m-%d%w%h:%n:%j%w%S%w%j%w%j%w%r%w%c%w%j%w%j%w"%B"%w"%f"\n
>
> Analog can now detect the content of the "cs(Referer)"-field if the field
> contains a value. If it does not contain a value and the symbol "-" is
> displayed instead, Analog cannot detect the line and marks it as corrupt.
> After removing the lines with empty "cs(Referer)"-fields from the log,
> Analog processed the file without errors.
>
> Can you still find any inconsistencies between my log and the
> W3C-specification? If not, what can I do to make Analog process the lines
> with empty "cs(Referer)"-fields?
From the W3C specification: "The dash character must not be used as an
abbreviation for an empty string." So their logformat still has bugs in it.
--
Jeremy Wadsack
Wadsack-Allen Digital Group
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
