David Todd wrote:
Hello there. I'm sure this question has been asked many times before, but I need help working out the format of the logs my ISP is using. They won't pass on the config details, and I can't get analog to recognise the logs. This is one line from one of my logs:-
200.184.127.61 - - [23/May/2004:00:10:08 +0200] "GET /images/1010th.jpg
HTTP/1.0" 200 3817 www.swordforge.co.uk "http://www.swordforge.co.uk/";
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" "-"
Can anybody workout the format it's in, I've tried many, but still get
errors :(
This should work:
LOGFORMAT (%S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b %v "%f" "%B" "%u")
LOGFORMAT (%S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b %v "%f" "%B" "%u")
LOGFORMAT (%S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b %v "%f" "%B" "%u")
The extra fields compared to ECLF are the virtual hostname after the byte-count, and the cookie after the browser string.
-- Klaus Johannes Rusch [EMAIL PROTECTED] http://www.atmedia.net/KlausRusch/
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
