OK,
        I added DEBUG C, and in the error file the asterisk you talk of
was pointing to (for each entry accessed (7,080)): 

C: 203.16.203.67 - - [01/Aug/2003:00:00:11 00] "GET /index.jsp HTTP/1.0"
2004851                                             *

In case the format of this email has been corrupted across email
clients, note the asterisk is directly below the forward slash
immediately after each entry of "GET. I unfortunately do not know what
this means in terms of rectifying the problem! There is further
confusion because the same format exists in a log file that was
successfully read by Analog.

Why does this format ("GET /index.jsp) suggest a corrupt log file?
Particularly when the same "GET /myfile... format was read just fine in
a previous log file? A difference in format that I have noticed is the
date/time suffix: 

Error:  [01/Aug/2003:00:00:11 00]
Success:        [16/Jun/2003:17:44:31 +1000]

Any thoughts on this?

Paul.


Analog can autodetect Common Logfile Format, so the fact that it said
it cannot autodetect the format of the log file means that it's not in
CLF or it's corrupt.

When you specify the APACHELOGFORMAT, Analog still has problem,
implying that many (or all) of the lines in the my_access_log are not
in the expected format.

Adding "DEBUG C" (also with "ALL") should cause Analog to print out
several lines from the log files followed by a line containing an
asterisk where the parsing failed. This can be useful for finding why
the format doesn't match.

Finally, Analog only needs access logs, not error logs. Web server
error logs are generally meant to be human readable, and Analog gets
all the error information it needs from the access log.

I believe there are many Tomcat users already running Analog. I'm not
aware (off hand) of any custom log format needed to process the logs.
You could search the list archives (see the bottom of this message)
for references to Tomcat server.

-- 

Jeremy Wadsack
Wadsack-Allen Digital Group


Paul Wallace <[EMAIL PROTECTED]> (Wednesday, September 10,
2003 4:28 PM):

> Hi,
>         Thank you for that, although when I added your suggestion, I
got
> a load of new errors (and no output). Here is a snippet of the
> errors.txt :

> C:\analog_532w32\analog 5.32\analog.exe: Warning L: Large number of
> corrupt
>   lines in logfile MyDir\logsAUG\my_access_log.2003-08-01.log: turn
> debugging on or try different LOGFORMAT
>     Current logfile format:
>       %S %j %j [%d/%M/%Y:%h:%n:%j] %v "%j%w%r%wHTTP%j" %c %b\n

> and this was repeated for each log file present in MyDir. I just added
> DEBUG ON to the config file, but was given nothing of substance (apart
> from the error file being 30MB large). After consulting
> http://www.analog.cx/docs/errors.html, I am just directed to pages I
> have already read.
>         Are there any Tomcat developers out there who have
successfully
> run Analog on Tomcat error logs?

> Thanks

> Paul.



> The logfile appears to be written with Apache's common format.
> If so, the following two lines in the Analog config file should work.

> APACHELOGFORMAT (%h %l %u %t %v \"%r\" %>s %b)
> LOGFILE MyDir\*.log

> HTH,

> -- Duke


> Paul Wallace wrote:

>> Hi,
>>
>> Yeah, OK...RTFM.
>>
>> It seems Analog cannot detect the format of my log files. They are 
>> served by Apache Tomcat, I don't see in 
>> http://www.analog.cx/docs/logfmt.html or /docs/logfile.html#formats 
>> anything mentioning this format or Apache Tomcat.
>>
>> Here is a snippet of one:
>>
>> 211.10.112.131 - - [01/Aug/2003:00:00:35 00] "GET 
>> /map_search_results.jsp HTTP/1.0" 200 15881
>>
>> How may I tell Analog of the Tomcat format?
>>
>> Thanks
>>
>> Paul.
>>

+-----------------------------------------------------------------------
-
|  TO UNSUBSCRIBE from this list:
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  Digest version: http://lists.isite.net/listgate/analog-help-digest/
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
+-----------------------------------------------------------------------
-
+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  Digest version: http://lists.isite.net/listgate/analog-help-digest/
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------

Reply via email to