When I try your suggestion I get this: cam1# ./analog /logs/aced/access.log.992238988.gz ./analog: analog version 5.1/Unix ./analog: Warning D: LOGFORMAT in configuration file analog.cfg with no subsequent LOGFILE (For help on all errors and warnings, see docs/errors.html) ./analog: Warning F: Can't auto-detect format of logfile /logs/aced/access.log.992238988.gz: ignoring it
gzip: stdout: Broken pipe ./analog: Warning R: Turning off empty time reports ./analog: Warning R: Turning off empty Request Report ./analog: Warning R: Turning off empty File Type Report ./analog: Warning R: Turning off empty Directory Report ./analog: Warning R: Turning off empty Domain Report ./analog: Warning R: Turning off empty Organisation Report ./analog: Warning R: Turning off empty Search Word Report ./analog: Warning R: Turning off empty Operating System Report ./analog: Warning R: Turning off empty File Size Report ./analog: Warning R: Turning off empty Status Code Report On Sat, 29 Dec 2001, Aengus wrote: > From: "Ted W. Gerold Jr." <[EMAIL PROTECTED]> > > > Heres what I want to do: > > I want to be able to run analog on a file via command line. > > When I try I get this: > > > > cam1# ./analog +c"LOGFILE /logs/aced/access.log.1000050340.gz" > > You can just specify the logfile without without any specifier - the > default argument for Analog is a logfilename: > ./analog /logs/aced/access.log.1000050340.gz > > > ./analog: analog version 5.1/Unix > > ./analog: Warning C: Unknown sort method in command > > line option +cLOGFILE /logs/aced/access.log.1000050340.gz > > +c (lower case) is for enabling the status code report. +C is for > specifying config parameters. > > > In my config I have: > > > > LOGFILE /logs/aced/bleah > > > > because I dont want to use this file, I want to specify my own file. > > Just delete it from the cfg file if you don't want it there, don't just > leave it there with bad data. > > > Also when analog runs on this specified file I would like it to > > incoperate the new data with the existing data, NOT overwrite. > > Analog generates reports based on the data it reads. If you want to > generate cumulative reports, you will have to keep all the logs and read > them from the beginning each time, or you can use cache files to summarise > the previous information, and incorporate it into a new report: > > http://www.analog.cx/docs/cache.html > > > Also after its complete and I look at the report under 'Domain > > Report' I get this: > > unresolved numerical addresses > > Anyway to fix that? > > Resove the IP addresses. http://www.analog.cx/docs/dns.html > > Typically, as many as 40% of IP addresses are unresolvable, depending on > the audience for a particular web server (intranet servers may well have > 100% resolution). There are some helper applications that can improve > matters - one in particular, jdresolve, will generate a "fake" hostname > based on who the IP block the address is in is allocated to. > (Unfortunately, the home page for jdresolve seems to have been > "temporarily unavailable" since October 11th - you can use google to find > another source). > > http://www.analog.cx/helpers/#dns > > Aengus > > +------------------------------------------------------------------------ > | This is the analog-help mailing list. To unsubscribe from this > | mailing list, go to > | http://lists.isite.net/listgate/analog-help/unsubscribe.html > | > | List archives are available at > | http://www.mail-archive.com/[email protected]/ > | http://lists.isite.net/listgate/analog-help/archives/ > | http://www.tallylist.com/archives/index.cfm/mlist.7 > +------------------------------------------------------------------------ > -- -Ted <[EMAIL PROTECTED]> +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
