That's great Aengus. It works now. Thank-you.
I need to tidy up the output though. Analog is treating every FTP command as a separate request. It therefore appears from the report, that there are more separate connections than there really are. So:
xx.xx.xx.xxx, someuser, 10/8/01, 8:01:14, MSFTPSVC1, servername, yy.yy.yyy.yyy, 0, 0, 0, 331, 0, [1038]USER, abcuser, -,
xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:14, MSFTPSVC1, servername, yy.yy.yyy.yyy, 0, 0, 0, 230, 0, [1038]PASS, -, -,
xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:18, MSFTPSVC1, servername, yy.yy.yyy.yyy, 0, 0, 0, 226, 0, [1038]sent, /abclatest/abcalert.rtf, -,
xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:19, MSFTPSVC1, servername, yy.yy.yyy.yyy, 701, 0, 734, 226, 0, [1038]sent, /abclatest/abcalert.rtf, -,
Appears as FOUR requests. Since this routine happens everytime a user connects to the server (including the sent file) I want only ONE request to be returned.
Any further instances of the above 4 FTP requests should each return ONE request in the Analog summary.
Is this possible in Analog?
Thanks Again
Andrew
-----Original Message-----
From: Aengus [mailto:[EMAIL PROTECTED]]
Sent: 17 October 2001 11:22
To: analog-help
Subject: Re: [analog-help] MS IIS4 MS IIS Log file Format (from FTP)
From: "Andrew Gaskell" <[EMAIL PROTECTED]>
> and here's my logformat:
>
> LOGFORMAT (%s, %u, %d/%m/%y, %h:%n%j%j, %j, %v, %j, %j, %j, %j, %b, %j,
> [%j]%j, %j, %j,)
>
> I get:
> Bad argument in configuration command, ignoring it.
analog: ...cont..: (reason: an unterminated string is present)
%h:%n%j%j, should be %h:%n%j, - Analog can't tell where the first %j
should end, so it can't interpret the rest of the line properly.
Aengus
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
