[analog-help] Corrupted lines due to unquoted quotes in logfile - how to handle?

[Arnoud Galactus Engelfriet]

Hi,

Recently I noticed that my web.log wasn't being processed properly,
and it turns out this was because some lines were considered
to be corrupted, and so the logfile format couldn't be auto-detected.

The corruption appears to be due to extra double quotes in arguments
that are quoted themselves, e.g.:

213.224.83.11 - - [16/Dec/2001:09:34:29 +0100] "GET /Alie/tekeningen.htm 
HTTP/1.1" 200 4011
"http://www.google.com/custom?q=tekeningen&hl=nl&cof="L:http://breedband.telenet.be/images/logo_telenet.gif;LH:70;LW:70;BGC:%23ffffff;T:%23000000;LC:%23004070;VLC:%23660066;ALC:%23DF5900;AH:left;"&start=40&sa=N";
"Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; TNET5.0NL)"
(all on one line, of course)

As you can see, the referer entry has a field 'cof' whose value
starts with a double quote. I suppose this is where Analog trips
and refuses to process this logfile further. There are more lines
of the same kind.

Does this mean I will have to write my own LOGFORMAT statement,
taking this into account? Or is there a way to tell Analog to
skip corrupt lines without also skipping the entire logfile?

Arnoud

-- 
Arnoud Engelfriet   <[EMAIL PROTECTED]>    PGP: 0x416A1A35
Patent engineer at Philips Corporate Intellectual Property
http://www.stack.nl/~galactus/    Speaking only for myself
+------------------------------------------------------------------------
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|    http://www.mail-archive.com/analog-help@lists.isite.net/
|    http://lists.isite.net/listgate/analog-help/archives/
|    http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------