Guillaume <[EMAIL PROTECTED]> wrote: >>> So I used it for LOGFORMAT but I still have two errors : >>> 1 - large number of corrupt lines for some of the log files (it >>> looks like analog will ignore the log files with corrupted lines >>> but will succesfully use the other ones) >> >> If you turn Debugging on, Analog puts a * under the field that it >> can't match to your logfile. (http://www.analog.cx/docs/debug.html). >> Compare one of the lines that Analog can't match with the Logformat >> you are using. > > In my analog.cfg I have > > > SETTINGS ON > DEBUG ON > WARNINGS ON > > Then when I run analog I get this : > > BOULOT:log_apache2:www.matrans-concept.com_20030728.log.gz > Logfile format: > %S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B" > %j %j\n > BOULOT:log_apache2:www.matrans-concept.com_20030729.log.gz > Logfile format: > %S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B" > %j %j\n > BOULOT:log_apache2:www.matrans-concept.com_20030730.log.gz > Logfile format: > %S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B" > %j %j\n > > etc. > > Would the * be placed under these lines if the field didnt match ???
Those lines aren't from your logfile, so no, Analog won't put a * under them. >>> You see, my logfiles are daily logs. So I opened two logfiles from 2 >>> consecutive days (december 08 and december 09) and found out that >>> some lines are identical in both files. >> >> Do you have lines in the December 09 log file that have December 08 >> dates on them? That would suggest a problem. > > Yes, thats what I have. > Does it mean that the results will get screwed up ? If you give Analog two log files, and some of the entries occur trwice, then Analog's results won't be a true reflection of the actual traffic to your website. > Do you think this problem could be a web server log configuration > problem ? It's unlikely - I don't know that you can configure a webserver to write the same entry twice. It sounds more likely that whatever "log rotation" process is being used to create daily log files is just copying the current days log, and then leaving it in place, so that you have the copy that you made, and the original, and the web server just keeps appending to the original log. But that's just a guess. Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
