Will Alexander wrote: > Try removing the escape characters ( the \'s ). I > use basically the same > format and don't need to escape the "'s. > > Will > In-Reply-To: > <[EMAIL PROTECTED]>; > from [EMAIL PROTECTED] on Wed, Sep 19, 2001 > at 12:10:09PM -0400 > > > On Wed, Sep 19, at 12:10pm so claimed Adam Ronthal > ([EMAIL PROTECTED]): > > > Hi all... > > > > I'm having some trouble getting Analog 5.03 to > parse a custom iPlanet (NES) > > log. > > > > The netscape header is as follows: > > > > format=%Ses->client.ip% %Req->headers.host% > %Req->headers.vars.auth-user% > > [%SYSDATE%] "%Req->reqpb.clf-request%" > %Req->srvhdrs.clf- > > status% %Req->srvhdrs.content-length% > "%Req->headers.referer%" > > "%Req->headers.user-agent%" > "%Req->headers.cookie.rtnuser%" > > > > > > And my LOGFORMAT command is: > > > > LOGFORMAT (%s %v %j [%d/%M/%Y:%h:%n:%j %j] \"%j > %r %j\" %c %b "%f" "%B" "%u") > > > > > > The debug output is: > > > > ./analog: analog version 5.03/Unix > > ./analog: Warning C: Bad argument in configuration > command: ignoring it: > > LOGFORMAT (%S %v %j [%d/%M/%Y:%h:%n:%j %j] > \"%j %r %j\" %c %b "%f" "%B" > > "%u") > > ./analog: ...cont..: (reason: an unknown escape > sequence is present) > > > > > > > > Any ideas? > > > > Thanks in advance! > > > > -Adam > > > > > +------------------------------------------------------------------------ > > | This is the analog-help mailing list. To > unsubscribe from this > > | mailing list, go to > > | > http://lists.isite.net/listgate/analog-help/unsubscribe.html > > | > > | List archives are available at > > | > http://www.mail-archive.com/[email protected]/ > > | > http://lists.isite.net/listgate/analog-help/archives/ > > | > http://www.tallylist.com/archives/index.cfm/mlist.7 > > > +------------------------------------------------------------------------ > > -- > -- > Will Alexander <[EMAIL PROTECTED]> > Unix Administrator, USAToday.com > Office: 703 558-3315 > Pager : 877 377-3553 __________________________________________________ Terrorist Attacks on U.S. - How can you help? Donate cash, emergency relief information http://dailynews.yahoo.com/fc/US/Emergency_Information/ +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
