I have to filter my log file for those lines in the request report which have a particular string in the argument list.
For example:
15.39.53.21 server.com user1 [22/May/2003:19:02:28 +0500] "GET /QuickPlace/jerk/Main.nsf/h_43F8B74C161D54EF85256C1D00655258/$new/?EditDocument&Form=h_PageUI&h_PageType;h_Revision,h_SetParentUnid HTTP/1.1" 200 78667
I have to filter lines which have "h_Revision" in the argument list. My logformat is
LOGFORMAT (%S %j %u[%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b)
I have tried
FILEEXCLUDE *
FILEINCLUDE *h_Revision*
REQEXCLUDE
REQINCLUDE *h_Revision*
And I have set the REQARGSFLOOR -5000r also, but nothing seems to be working.
Any help will be appreciated.
Thanks,
Geeta
