"Carsten B�ttcher" <[EMAIL PROTECTED]> wrote: > The problem is, how i can see it, that my logfile has one more > field than the "demo"-line my admin send me. > > Here are the lines: > > 127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif > HTTP/1.0" 200 2326 "http://www.example.com/start.html"; "Mozilla/4.08 > [en] (Win98; I ;Nav)"
This is NCSA Combined format. Analog will recognize it without any LOGFORMAT string. > 212.38.199.2 - - [08/Feb/2002:16:12:41 +0100] "GET /free/airmarinend.gif > HTTP/1.1" 200 3201 www.css-media.net "-" "Mozilla/4.0 (compatible; MSIE > 5.0; Win32)" This is the same as the format that I explained in the URL I posted. It's NCSA Combined with one additional field. If your logfile contains both of these loglines, then you need to specify both formats in Analog.cfg: LOGFORMAT COMBINED LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b %v "%f" "%B") > Ok..the diffrence is the third field after the HTTP/1.x".. > > The sample field is "http://......html"; > My file has the field www,css-media.net AND "-" TWO fileds... I don`t > know why but it seems to me a difference..or i havent understood your > mail.... www.css-media.net is %v, your virtual host name. The following fields are %f, the referrer (empty, and therefore "-" in your example, but normally "hhtp://...") and %B, the Browser string. > In my opinion thats the error in the file wich is reported by analog ? It's not a matter of opinion - Analog quite clearly indicates which field it's having problems with, but putting a * in the line below it, if you turn debugging on. Aengus +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
