Greetings,
Analog does *not* read lines where time isn't accompanied by date. You have
to change the log files.
There are some tools (it's in the faq). But if you want to do it manually,
you could take ms-word (or something like it) that can distuingish crlf
chararcters (carriage return and line feed, ms-word calls them 'paragraph
characters'), and simply replace any 'crlf' with 'date crlf' (of course
using the date of the file). When done, remove the superfluous dates on the
comment lines (like 'date #').
Analog should then be able to automatically detect the log format.
Andr�
> -----Original Message-----
> From: Phil Donaldson [SMTP:[EMAIL PROTECTED]]
> Sent: Wednesday, May 30, 2001 5:15 AM
> To: [EMAIL PROTECTED]
> Subject: [analog-help] IIS log format?
>
> Hi,
>
> I need to analogise some IIS logs where the date is on a seperate line
> near the top of the file, not on each line.
> Can anyone tell me how to tell Analog to understand this?
>
> Excerpt from log file below - I've added blanks lines for readability.
>
> Thanks,
> Phil.
>
> #Software: Microsoft Internet Information Server 4.0
> #Version: 1.0
> #Date: 2001-02-07 00:02:16
> #Fields: time c-ip cs-username cs-method cs-uri-stem cs-uri-query
> sc-status sc-bytes cs(User-Agent) cs(Cookie) cs(Referer)
>
> 00:02:16 203.96.59.20 - GET /images/h_submit.gif - 406 695
> Mozilla/4.0+(compatible;+MSIE+5.5;+Windows+NT+4.0)
> SITESERVER=ID=9028c36c6b3d9e3116c5ba2eccbd77ad;+ASPSESSIONIDQGGQQGES=BKKDP
> MNCFEHJFJBHOOJNDBLD
> https://203.96.137.152/payment.asp
>
> 00:02:19 203.96.59.20 - GET /images/h_payment.gif - 406 695
> Mozilla/4.0+(compatible;+MSIE+5.5;+Windows+NT+4.0)
> SITESERVER=ID=9028c36c6b3d9e3116c5ba2eccbd77ad;+ASPSESSIONIDQGGQQGES=BKKDP
> MNCFEHJFJBHOOJNDBLD
> https://203.96.137.152/payment.asp
>
> 00:03:14 203.96.154.172 - GET /payment.asp o=478&s=768555649 200 0
> Mozilla/4.0+(compatible;+MSIE+5.5;+Windows+NT+4.0)
> SITESERVER=ID=5d6f0e35833597ef4a07efd204b18346;+ASPSESSIONIDQGGQQGES=BIKDP
> MNCCGPLDJAOHMFANEOB
> -
>
> +------------------------------------------------------------------------
> | This is the analog-help mailing list. To unsubscribe from this
> | mailing list, go to
> | http://lists.isite.net/listgate/analog-help/unsubscribe.html
> |
> | List archives are available at
> | http://www.mail-archive.com/[email protected]/
> | http://lists.isite.net/listgate/analog-help/archives/
> | http://www.tallylist.com/archives/index.cfm/mlist.7
> +------------------------------------------------------------------------
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
