Thank you for your input, I have incorporated your suggestions, but I am still stuck. They now show up as unwanted entries, instead of corrupt lines. All I really need out of this is the number of unique IP addresses in all these log files, and quick and easy way to ignore everything but that?
Here's my new log line: LOGFORMAT (%S, %u, %B, %j, %m/%d/%Y, %h:%n:%j, %j, %j, %j, %j, %j, %j, %j, %j, %j, %j, %j, %j, %r, %j, %j, %c, %j, %j, %j) Here's the line of the log itself: 130.189.202.99, anonymous, Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC), -, 10/30/2003, 4:36:15, -, FAHC53, -, www.fahc.org, -, 80, 15, 426, 781, http, -, GET, http://10.7.40.197/Human_Resources/MasterPages/images/nav_hr_lpn_06.gif, -, Cache, 0, -, -, - Any other ideas? Appreciate your help. Makk -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, October 31, 2003 12:20 AM To: [EMAIL PROTECTED] Subject: Re: [analog-help] Corrupt Log File lines Hello, I think that you have wrong a date format %d/%m/%y. Please, could you try a date format %m/%d/%Y ? >My LOGFORMAT line is >LOGFORMAT (%s, %u, %B, %j, %d/%m/%y, %h:%n:%j, %j, %j, %j, %j, %j, %j, %T, %j, %b, %j, %j, %j, %r, %j, %j, %c, %j, %j, %j) Bye Karel Simecek "Lawrence, Makk" <[EMAIL PROTECTED]>@lists.isite.net on 30.10.2003 22:58:40 Odpovězte prosím - [EMAIL PROTECTED] Odesláno kým: [EMAIL PROTECTED] Komu: <[EMAIL PROTECTED]> Kopie: Předmět: [analog-help] Corrupt Log File lines >I cannot get analog 5.24 to read this logfile with a custom LOGFORMAT line, it reports corrupt lines >My logfile feilds: >130.189.202.99, anonymous, Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC), -, 10/30/2003, 4:36:15, -, FAHC53, -, www.fahc.org, -, 80, 15, 426, 781, http, -, GET, >http://10.7.40.197/Human_Resources/MasterPages/images/nav_hr_lpn_06.gif >, -, Cache, 0, -, -, - >I also attached the single line logfile, and the cfg file too >My LOGFORMAT line is >LOGFORMAT (%s, %u, %B, %j, %d/%m/%y, %h:%n:%j, %j, %j, %j, %j, %j, %j, %T, %j, %b, %j, %j, %j, %r, %j, %j, %c, %j, %j, %j) >As you can see I want to throw away most of the data. >Please help... >Thanks, >Makk >Makk T. Lawrence >Fletcher Allen Health Care >Information Services - eHealth >ph: (802) 847-0900 >e-mail: [EMAIL PROTECTED] >Have a Great Day! +----------------------------------------------------------------------- +- | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +----------------------------------------------------------------------- +-
qtrly_report_isa.cfg
Description: qtrly_report_isa.cfg
test.log
Description: test.log
