Re: [analog-help] LOGFORMAT question from newbie

[Lyle Penner]

Title: Re: [analog-help] LOGFORMAT question from newbie

Jeremy,

Thanks for your response! I tried “DEBUG C” and came up with a million entries that read similar to this:

C: cn852860 –a.bensl.pa.home.com - -[07/Mar/2001:02:3809 –6000] “GET /IMAGES/Frankenstein/intro2.gif HTTP/1.1” 200 1149 www.watershed.winnipeg.mb.ca

How would I go about creating a custom logformat from this?

Thanks in advance,
-Lyle Penner
[EMAIL PROTECTED]




Subject: Re: [analog-help] LOGFORMAT question from newbie

Lyle Penner ([EMAIL PROTECTED]):

> Hi, I’m new to Analog. My internet provider says the log format they are
> issuing is “Common” or “Netscape Enterprise” format. However, when I try to
> analyze the log file using “Common” or “Netscape” or any other format I’ve
> tried, I get this kind of reply from Analog:

> Processing...
> analog: analog version 5.02/Mac
> analog: Warning L: Large number of corrupt lines in logfile Bardo:Desktop
>   Folder:watershedaccess_log.gz: try different LOGFORMAT
>   (For help on all errors and warnings, see docs/errors.html)
>     Current logfile format:
>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b\n
>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b\n
>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b\n
> Complete!


> Any ideas?

Try using DEBUG C to find out where in the line the error is and come
up with a custom LOGFORMAT. Alternately, send 3 - 5 lines of the
logfile to the list and someone here can figure it out for you.

- --

Jeremy Wadsack
Wadsack-Allen Digital Group