Thank you for providing this help list.
 
I am using analog 5.32 on Redhat Linux 8.0 with apache 1.3.27 server.  I had my host change my logformat under apache to include the search word field designated by the %q.  Since then I've been unable to run the analog program successfully.  I have waited until the logs were rotated at months end to ensure the logs would be consistant all the way thru so it wouldn't have a problem with a mid file change.
 
The LogFormat line in the apache conf file is like so:
LogFormat "%h %l %u %t \"%r\" %>s %b %q \"%{Referer}i\" \"%{User-Agent}i\"" combined
 
I have tried many different variations in the analog.cfg file with and without APACHELOGFORMAT and LOGFORMAT however analog has a problem with every line in the logs file.   I know the problem must be with the LOGFORMAT. 
 
I added this line to the analog.cfg
 
APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b %q \"%{Referer}i\" \"%{User-Agent}i\")
 
(I've also tried changing the Referer and Useragent sections with the options specified by analog ie.
APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b %q %f %B)
 
and I specify the log file on the command line calling it like so:
 
./analog /www/logs/knpv-access-log > /www/htdocs/knpv/logs/usage.html
 
Here is the output after it goest thru all the logfile line entries:
*******************************************************************************
F: Closing logfile /www/logs/knpv-access-log
S: Successful requests: 0
S: Redirected requests: 0
S: Failed requests: 0
S: Requests returning informational status code: 0
S: Status code not given: 0
S: Unwanted lines: 0
S: Corrupt lines: 6417
/www/cgi-bin/analog/analog: Warning L: Large number of corrupt lines in
  logfile /www/logs/knpv-access-log: turn debugging on or try different
  LOGFORMAT
  (For help on all errors and warnings, see docs/errors.html)
    Current logfile format:
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B"\n
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B"\n
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b "%f" "%B"\n
F: Opening stdout as output file
/www/cgi-bin/analog/analog: Warning R: Turning off empty time reports
/www/cgi-bin/analog/analog: Warning R: Turning off empty Request Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty File Type Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty Directory Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty Domain Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty Organisation Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty Search Word Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty Operating System
  Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty File Size Report
/www/cgi-bin/analog/analog: Warning R: Turning off empty Status Code Report
*********************************************************************************************
 
It doesn't appear to be detecting the %q field where it says "Current logfile format."  I have "DEBUG ON" in the analog.cfg file but it still says turn debugging on.  I know I must be overlooking something obvious.  I'd appreciate any input.
 
Darryl
 
 

Reply via email to