On Wednesday, August 10, 2005 7:55 AM [EDT],
Andy Sears <[EMAIL PROTECTED]> wrote:

> Cheers Aengus,
>
> Here is the #Fields line.
>
> #Software: Microsoft Log Parser
> #Version: 1.0
> #Date: 2005-08-07 21:01:11
> #Fields: date time s-sitename s-computername s-ip cs-method
> cs-uri-stem
> cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent)
> cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status
> sc-bytes cs-bytes time-taken

Off hand, it looks like this LOGFORMAT will do the trick. If it doesn't
work, just post a few lines of the log, so that it can be tweaked.

LOGFORMAT (%Y-%m-%d  %h:%n:%j %j %j %j %j %r %q %j %u %S %j (%B) %j (%f) %j
%c %j %j %b %j %T)

http://analog.cx/docs/logfmt.html

Aengus

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to