Thanks to all for your responses. I generated a custom LOGFormat, but I am not having much luck.
Here's the snippet from my log file (its and FTP log of format MS IIS4 Log file format:
xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:14, MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 331, 0, [1038]USER, someuser, -,
xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:14, MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 230, 0, [1038]PASS, -, -,
xx.xxx.xx.xxx, somecuser, 10/8/01, 8:01:18, MSFTPSVC1,myservername, yy.yy.yyy.yyy, 0, 0, 0, 226, 0, [1038]sent, /mydir/myfile.rtf, -,
xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:19, MSFTPSVC1, myservername, yy.yy.yyy.yyy, 701, 0, 734, 226, 0, [1038]sent, /mydir/myfile.rtf, -,
xx.xxx.xx.xxx, someuser, 10/8/01, 8:20:00, MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 331, 0, [1039]USER, someuser, -,
xx.xxx.xx.xxx, somecuser, 10/8/01, 8:20:00, MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 230, 0, [1039]PASS, -, -,
and here's my logformat:
LOGFORMAT (%s, %u, %d/%m/%y, %h:%n%j%j, %j, %v, %j, %j, %j, %j, %b, %j, [%j]%j, %j, %j,)
I get:
Bad argument in configuration command, ignoring it.
Could someone please help me to correct my logformat?
Thanks
Andrew
-----Original Message-----
From: Joshua P. Cooley [mailto:[EMAIL PROTECTED]]
Sent: 16 October 2001 18:41
To: [EMAIL PROTECTED]
Subject: RE: [analog-help] MS IIS4 MS IIS Log file Format (from FTP)
Andrew Gaskell wrote:
> I also have the following in my report if this is any help:
> Logfile lines without status code: 244
This is the key to your dilemma. The logformat you are using is not
correctly identifying the status code field. You will probably need to
write a custom log format. Also, be aware that Analog was written to
analyze HTTP logs and may not be able to report on all your FTP log lines
since FTP status codes differ from HTTP status codes.
+--------------------------------------------------------------------+
| Joshua Cooley ([EMAIL PROTECTED]) http://www.kaycee.net/josh |
| Programmer/Network Administrator |
| KayCee Software, Inc. http://www.kaycee.net/kcsi |
+--------------------------------------------------------------------+
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
