Ok, the '-' is an indicator (in CLF) that the field is empty. So Analog automatically converts it to a null value when it parses the logs. This is why the counts for requests and bandwidth include those lines, but there is no '-' entry in your Host Report (if you had looked for it).
You can use the following command to remove all those entries from your reports: HOSTEXCLUDE "" -- Jeremy Wadsack Wadsack-Allen Digital Group Don Saul <[EMAIL PROTECTED]> (Tuesday, September 16, 2003 4:45 PM): > Thank, Jeremy, I do want to remove the unknown host "-" from all the > reports but the "HOSTEXCLUDE -" is not working for me. I did, as a test > pre-process a log file and remove those lines containing a "-" for the > host and reports then came back fine. > I'm open to suggestions anyone else may have for excluding hosts which > show up in the Apache logs as a dash "-". > I'm wondering is there is a conflict with the dash because it can be used > when excluding a range of IPs? > Thanks, > Don > On Tue, 16 Sep 2003, Jeremy Wadsack wrote: >> >> Don Saul <[EMAIL PROTECTED]> (Tuesday, September 16, 2003 10:02 AM): >> >> >> > I was unable to find any references in the archives for this particular >> > problem. Due to firewalls, I have an outside proxy server that shows up >> > in my Apache logs as a dash "-" in the host field. Because this server >> > checks every 2 minutes, I have a lot of these entries in my logs. >> >> > Due to having a lot of virtual hosts in my Apache config, I don't want to >> > pre-process the logs to remove these entries if I don't have to. I've >> > tried variations of: >> >> > HOSTEXCLUDE - >> > HOSTEXCLUDE "-" >> > HOSTEXCLUDE *-* >> >> > Does anyone have a suggestion for removing the unknown host "-" so it >> > isn't refelected in my reports? >> >> HOSTEXCLUDE will remove those requests from *all* your reports. If >> that is what you really want to do then using the first item shown >> should work. >> >> If you just don't want it listed in your Host Report, then you should >> use this: >> >> HOSTREPEXCLUDE - >> >> >> >> >> -- >> >> Jeremy Wadsack >> Wadsack-Allen Digital Group >> >> +------------------------------------------------------------------------ >> | TO UNSUBSCRIBE from this list: >> | http://lists.isite.net/listgate/analog-help/unsubscribe.html >> | >> | Digest version: http://lists.isite.net/listgate/analog-help-digest/ >> | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general >> | List archives: http://www.analog.cx/docs/mailing.html#listarchives >> +------------------------------------------------------------------------ >> > +------------------------------------------------------------------------ > | TO UNSUBSCRIBE from this list: > | http://lists.isite.net/listgate/analog-help/unsubscribe.html > | > | Digest version: http://lists.isite.net/listgate/analog-help-digest/ > | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general > | List archives: http://www.analog.cx/docs/mailing.html#listarchives > +------------------------------------------------------------------------ +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
