Max Gut <[EMAIL PROTECTED]> wrote: > With this analog.cfg Analog Report Warnings are: > > Warning L: Large number of corrupt lines in logfile > try different LOGFORMAT, Current logfile format: > %S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f" "%B" > "unknown"\n %S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f" > "%B" "-"\n %j %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f" > "%B" "%S"\n > > My Provider added the {X-Forwarded-For} to catch the "logins via > Proxyserver" he said and this was where my problem started.
The LOGFORMATs I provided work with the sample log entries you provided. You never answered a question I asked before I suggested you provide some sample lines - "Does the report that is generated indicate that Analog recognizes any of the lines in your log?". If you have lines in your log from before your provider added "{X-Forwarded-For}" then you'll get the "large number of corrupt lines" warning until you put a LOGFORMAT command for the old lines in your .cfg file too. If you have more than one type of format, you have to provide multiple LOGFORMAT lines. Aengus +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/analog-help@lists.isite.net/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------