On Fri, 24 Sep 2004, Andrea Zorretta wrote:
>
> Hi,
> if I use this APACHELOGFORMAT "%h %l %u %v %A %t \"%r\" %>s %b %T %f %U
> \"%{Referer}i\"" in the analog.cfg the response is :
>
> /analog: analog version 5.32/Unix
> ./analog: Warning C: Bad argument in configuration command: ignoring it:
> APACHELOGFORMAT -> LOGFORMAT (%S %j %u %v %v [%d/%M/%Y:%h:%n:%j]
> "%j%w%r%wHTTP%j" %c %b %t %j %r "%f")
> ./analog: ...cont..: (reason: one item occurs twice in format)
>
> Can I help me ?
And earlier:
> >
> > 10.173.170.185 - - rpasrv1 10.173.112.13 [23/Sep/2004:11:34:25 +0200]
> > "GET /Superiore.jsp HTTP/1.1" 200 4550 0 - /Superiore.jsp
> > "http://10.173.112.13:7778/index.jsp";
> >
> > LogFormat "%h %l %u %v %A %t \"%r\" %>s %b %T %f %U \"%{Referer}i\""
> > extlog
> >
The problem is that the requested file (/Superiore.jsp) appears twice on
the line, and analog doesn't know which one to use. Also the server name
appears in two different ways -- both rpasrv1 and 10.173.112.13 -- and
again, analog doesn't know which one to use.
Try using this LOGFORMAT to analyse the logfiles. (This just turns the
duplicate fields into junk, %j).
LOGFORMAT (%S %j %u %j %v [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j"
%c %b %t %j %j "%f")
(all on one line, of course).
You might also want to consider whether you want to change your Apache
LogFormat to avoid recording all this duplicate information.
--
Stephen Turner, Cambridge, UK http://homepage.ntlworld.com/adelie/stephen/
"Low Priced Cambridge Clare College. Big selection at eBay UK!"
(Ad after Google search for Clare College Cambridge)
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------
