I got those lines from the fields string at the top of the log file, but when I did not specify a logformat command it said that the closest that it found was the w3 extended and it would use that but it only worked for less than 2% of the lines and the others it gave me corrupt lines errors. I am enclosing a sample of the log. It is the first 10-20 lines of the log file.
Thanks, Rodney > "Rodney Knott" <[EMAIL PROTECTED]> wrote: > >> Here is a sample from the log files with a field name translation from >> the ISA log book. > > Did you get these lines from a #Fields string at the top of your log > file? Analog is designed to parse that string, so that you don't have > to specify any LOGFORMAT command at all. > >> time-taken (Processing time) - >> cs-bytes (Number of bytes sent) > > I guessed that "733 140" was bytes and time taken, not the other > way round. > >> I have set up the string based as you have on the variables being just >> as you are showing them. Why I keep getting the corrupt lines is >> beyond me. > > I notice that the sample log file you attached in your first post on > Monday has one more field than the sample line you posted yesterday. If > you've changed your logformat, you'll get errors unless you specify > seperate LOGFORMATs for your different logfiles. > > Do yourself a favour, and use the W3 Extended logs. > > Aengus > > +------------------------------------------------------------------------ > | This is the analog-help mailing list. To unsubscribe from this > | mailing list, go to > | http://lists.isite.net/listgate/analog-help/unsubscribe.html > | > | List archives are available at > | http://www.mail-archive.com/[email protected]/ > | http://lists.isite.net/listgate/analog-help/archives/ > | http://www.tallylist.com/archives/index.cfm/mlist.7 > +------------------------------------------------------------------------
c-ip cs-username c-agent date time s-computername cs-referred r-host r-ip r-port time-taken cs-bytes sc-bytes cs-protocol s-operation cs-uri s-object-source sc-status 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 - 234 4943 http GET http://10.0.2.3/images/TopMenu010802.swf Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 16 237 3686 http GET http://10.0.2.3/images/BottomMenu010802.swf Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 - 299 13269 http GET http://10.0.2.3/images/FeatureLivebg2.jpg Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 172 300 16200 http GET http://10.0.2.3/images/FeatureRadiobg2.jpg Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 281 300 19618 http GET http://10.0.2.3/images/greenbackground.jpg Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 484 297 15737 http GET http://10.0.2.3/images/FeatureTVbg2.jpg Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 546 298 23622 http GET http://10.0.2.3/images/redbackground.jpg Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:00 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 625 301 19813 http GET http://10.0.2.3/images/purplebackground.jpg Inet 200 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:02 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 622 141 http GET http://10.0.2.3/images/SfBg.gif Inet 304 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:02 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 625 141 http GET http://10.0.2.3/images/header9.jpg Inet 304 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:02 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 628 141 http GET http://10.0.2.3/images/sfmainbg06.gif Inet 304 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:02 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 624 141 http GET http://10.0.2.3/images/spacer.gif Inet 304 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:02 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 554 6604 http GET http://10.0.2.3/images/Features/FtLiveEddieLong.jpg Inet 200 65.80.173.127 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1/12/2002 0:00:02 FIREWALL02 - www.streamingfaith.com 10.0.2.3 80 2641 241 53700 http GET http://10.0.2.3/FlashFeatures/Introduction4.swf Inet 200 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:03 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 625 140 http GET http://10.0.2.3/images/searchbg.jpg Inet 304 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:03 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 623 141 http GET http://10.0.2.3/images/tvtab.gif Inet 304 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:03 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 626 141 http GET http://10.0.2.3/images/radiotab.gif Inet 304 24.158.100.61 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 1/12/2002 0:00:03 FIREWALL02 - www.streamingfaith.tv 10.0.2.3 80 - 623 141 http GET http://10.0.2.3/images/arrow.GIF Inet 304
