[EMAIL PROTECTED] ([EMAIL PROTECTED]):
> I have 2 years of .TXT log files created by a Lotus Domino server. I > am trying to create a suitable configuration so that ANALOG can > process these. > The main problem that I am having is with the username. The username, when > present, is displayed in the text file as follows: > CN=Mickey M Mouse/O=Disney > "CN" will always be present at the start of the name. "/O=Disney" will > always be present at the end of the name. > The problem that I am having is the spaces - Aanlog tries to take each word > separated by spaces as a new field. Actually Analog looks for the next character that matches after a variable. If the variable is followed by a space, then it looks for the next space. If followed by a '/' it will look for a '/'. > EXAMPLE: > 4.35.83.178 www.disney.com CN=Mickey M Mouse/O=Disney [08/Mar/2002:00:12:15 > +0800] "GET (REMAINDER OF LINE CLIPPED) > 4.35.83.178 www.disney.com CN=Daffy Duck/O=Disney [08/Mar/2002:00:12:15 > +0800] "GET (REMAINDER OF LINE CLIPPED) > 4.35.83.178 www.disney.com - [08/Mar/2002:00:12:15 +0800] "GET > (REMAINDER OF LINE CLIPPED) > Notice in the examples above that in the first case I have a name with a > middle initial. In the second example, I have a first and last name but no > middle initial. In the third example, I have only a "-" meaning that there > is no username. > CAN ANYONE ASSIST ME IN CREATING A LOGFORMAT LINE THAT WILL WORK WITH ALL > THREE OF THE ABOVE? You need two LOGFORMAT commands; one for the line with '-' and one for the lines with names. Assuming the lines are similar to CLF, using the formats in the docs, I would suggest these to start: LOGFORMAT (%S %j - [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b) LOGFORMAT (%S %j CN=%u/0=Disney [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b) This will work as long as no usernames have a '/' in them. > I am not sure if the file attachment will go through but I have > attached a snippet of a log file called SampleDominoLog.TXT It is preferable that you include 3 or 4 COMPLETE lines in the text of your message than send a 28kb text attachment to all the members of the list. The lines above (especially if complete) would have been enough. -- Jeremy Wadsack Wadsack-Allen Digital Group +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
