Jeremy Wadsack <[EMAIL PROTECTED]> wrote: > Aengus <[EMAIL PROTECTED]> (Wednesday, November 05, 2003 10:25 AM): > >> Jeremy Wadsack <[EMAIL PROTECTED]> wrote: >>> There is not real way of knowing from the web server logs when the >>> server was restarted. > >> Not quite true - If IIS is using the W3C Extended format, it will >> add a new Header section to the logfile each time it starts, showing >> the #Software, #Version, #Date and #Fields. > >> So you can tell when it restarted, but you can't tell exactly when it >> crashed, and any entries that make it to the logfile before the >> system crashes are probably "innocent", though they'll probably tell >> you when the crash occured to within a few seconds unless the server >> is fairly idle. > > Is this true on IIS 4 as well? I thought that one of the problems in 4 > with the headers was that it did *not* insert them, therefore every > line needed to have both date *and* time so that Analog could know > when the requests really took place.
No, it always inserts a header when IIS restarts, even on IIS4. But it doesn't insert a new header unless IIS restarts, so that on a server that's configured to create monthly logs, but that isn't used on the weekends (an internal departmental server, for example), you couldn't tell for sure that two or three days haven't passed between a request at 19:00 and the next request at 07:00. And Analog ignores the #Date: header anyway, so even if it was always inserted at midnight, Analog would still require you to have both a date field and a time field in each log entry. Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
