Guillaume <[EMAIL PROTECTED]> wrote: > But now I still have the "possible double counting" error :
It's not an error - it's a warning. (There is a difference - Analog will stop when it encounters an error, it will continue when it generates a warning). Having overlaps is perfectly normal if you are analysing the logs from a number of different servers at the same time. People in this situation can safely ignore that warning. But Analog provides a warning because if there isn't an obvious reason for overlaps, then you should find out what is causing them. > analog: Warning L: logfiles > BOULOT:log_apache2:www.matrans-concept.com_20031206.log.gz and > BOULOT:log_apache2:www.matrans-concept.com_20031207.log.gz overlap: > possible > double counting > > I still don't understand if theres a way to tell analog to fix this > problem ? No. If it's a problem (if you only have one server), it needs to be fixed before you give the logs to Analog. If you are sure that there are entries in the 1207 log that should be there, take them out. (You could use the TO and FROM directives to get Analog to ignore some entries in one of the log files, but you'd have to do multiple passes and use cache files to get a result that way. It might be worth doing for a one off problem, but it would probably be quicker to just delete the offending entries from the logfile). Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
