Martin Brachwitz ([EMAIL PROTECTED]):
> Hello,
> perhaps someone can give me a hint on the following problem:
> usualy I get entries with user ids like this:
> 192.168.1.1 - Bill [01/Aug/2001:07:19:02 +0200] "GET / ...
> If the user types in several words (by mistake), the apache logfile will
> look like this:
> 192.168.1.1 - Bill Gates [01/Aug/2001:07:19:02 +0200] "GET / ...
> analog interprets this record as corrupted, but I would like it to
> show up in the User Failure Report. How can I convince analog that
> the user id may consist of several tokens up to the "["?
Make sure '[' is the first character after the %u token, rather than a
space. For example, if your LOGFORMAT is for Common files:
LOGFORMAT (%S %j %u[%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b)
LOGFORMAT (%S %j %u[%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b)
LOGFORMAT (%S %j %u[%d/%M/%Y:%h:%n:%j] "%r" %c %b)
--
Jeremy Wadsack
Wadsack-Allen Digital Group
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
