On Wed, 5 Sep 2001, KEVIN ZEMBOWER wrote:
> Can anyone help me understand how MS IIS3 logs GETs? I'm trying to create INTSEARCH
>reports, and having no luck at all.
>
> Here's two log entries. The first occurred, I think, when I used the search box at
>my web page, http://www.jhuccp.org/, to search for my last name. The second occurred
>when I clicked on one of the found documents.
> �------------------------------------
> 52PF201, -, 9/5/01, 12:12:02, W3SVC, WEB1, web1.jhuccp.org, 125, 475, 2622, 1, 0,
>GET, /scripts/index/searccp.idq, Mozilla/4.76 [en] (WinNT; U),
>http://www.jhuccp.org/, -,
>CiMaxRecordsPerPage=10&CiScope=%2F&TemplateName=searccp&CiSort=rank%5Bd%5D&HTMLQueryForm=http%3A%2F%2Fwww.jhuccp.org%2Fsearccp.stm&CiRestriction=ZembowerZembower,
>
> 52PF201, -, 9/5/01, 12:12:06, W3SVC, WEB1, web1.jhuccp.org, 0, 486, 7054, 200, 0,
>GET, /contact.stm, Mozilla/4.76 [en] (WinNT; U),
>http://www.jhuccp.org/scripts/index/searccp.idq?CiMaxRecordsPerPage=10&CiScope=%2F&TemplateName=searccp&CiSort=rank%5Bd%5D&HTMLQueryForm=http%3A%2F%2Fwww.jhuccp.org%2Fsearccp.stm&CiRestriction=Zembower,
> -, -,
> �----------------------------------------
> If I'm understanding this correctly, the query string is showing up in the referrer,
>not the file requested. For some reason, it's doubled in the first log entry, but
>correct in the second. It's not ever showing up after a question mark in the file
>requested, even though the form is using a GET action.
>
> Can anyone help me understand what's happening here? Is my IIS broken? Will it work
>differently if I install the latest IIS? If this behavior is correct, is it possible
>to create INTSEARCH reports? If necessary, I'll be happy to upload my analog.cfg
>files that don't seem to work.
>
> Thank you for any and all suggestions and thoughts. I really like analog and hope
>that I can get it to work in this situation.
>
This is not IIS's own format, so you must already have your own LOGFORMAT
command. Look at the %q token in the LOGFORMAT, which is for when the query
strings is stored in a separate field from the filename.
--
Stephen Turner http://www.statslab.cam.ac.uk/~sret1/
Statistical Laboratory, Wilberforce Road, Cambridge, CB3 0WB, England
"This is Henman's 8th Wimbledon, and he's only lost 7 matches." BBC, 2/Jul/01
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
