In <000001c17dde$7e098790$6300000a@rrlaptop>, "Rob Ruth" <[EMAIL PROTECTED]> writes: > In addition to the public traffic (standard combined logs) on our > servers I run a health check that produces the following entry in the > log: > > 192.x.x.x - - [24/Nov/2001:22:05:08 -0800] "GET /index.php" 200 14480 > "-" "-" > > I have excluded this host w/ the option "HOSTEXCLUDE 10.0.0.1" in my > analog.cfg file but I still get the following error when I run Analog:
Your sample shows a net 192 address whereas your HOSTEXCLUDE statement is for a net 10 address, however since analog needs to parse the line first before it can exclude a certain host, using HOSTEXCLUDE will not reduce the number of bad lines. Does your health check really result in such a log file entry on two lines? The best to handle this would probably be to reformat the log file prior to running it through analog. -- Klaus Johannes Rusch [EMAIL PROTECTED] http://www.atmedia.net/KlausRusch/ +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
