I don't ever care about "secuser", but it will always be in the logs.
I had a similar problem where I wanted to see only certain lines, whereas you seem to want to see only parts of all lines. There may be a way to do what you want within analog (I'm no expert) but you should be able to do it externally. Here's what I do:
Using the plain text logs, the IP addresses are resolved by DNStran, and the translated copies of the logs are written into a file in a compressed form. Having done this, I run the log files into analog, telling analog (via its configuration files) to decompress the log files using gzip piped through a grep filter that extracts only the entries that I want.
You should be able to something similar by using sed (in he place of grep in my example) to strip out the "secuser" parameter from each line.
-- Dennis Nichols
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
