The quotes was it, thanks for your help


"Aengus" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]

01/10/2006 09:32 PM

Please respond to
Support for analog web log analyzer <analog-help@lists.meer.net>

To
"Support for analog web log analyzer" <analog-help@lists.meer.net>
cc
Subject
Re: [analog-help] Help with Log Format





On Tuesday, January 10, 2006 4:59 PM [EDT],
Steven Garrett <[EMAIL PROTECTED]> wrote:

>> Been working on this for the past couple days with no luck.  Googled
>> around but didn't find too much help either.  I think I'm missing
>> soemthing small but since I've been looking at this for so long need
>> another pair eyes to probably see what's going wrong there.
>>
>> This is the Log format on my http server:
>>
>> Custom "%h %l %u %t "%r" %s %b "%{Referer}i" "%{User-Agent}i"
>> "%{Cookie}i" %T"
>>
>> This is what I'm using in the analog.cfg
>>
>> APACHELOGFORMAT (%h %l %u %t \"%r\" %\>s %b \"%{Referer}i\"
>> \"%{User-Agent}i\" \"%{Cookie}i\" %T)

The whole point of APACHELOFORMAT is to allow you to just cut and paste your
logformat from your httpd.conf -

Custom "%h %l %u %t "%r" %s %b "%{Referer}i" "%{User-Agent}i" "%{Cookie}i"
%T"
is
APACHELOGFORMAT ("%h %l %u %t "%r" %s %b "%{Referer}i" "%{User-Agent}i"
"%{Cookie}i" %T")

Note that that means you've got a " at the beginning and end of each line of
your logfile.

>> This is the output when I run analog from the command line
>>
>> C: "130.13.1.138 - - [08/Jan/2006:23:59:50 -0500] 80 "GET

That 80 looks suspiciously like a port number - and it's not in your
logformat.

>> /tsc/common/images/peps/columnists/ssp.gif HTTP/1.1" 200 0 "http://
>> www.thestreet.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
>> 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Cent
>> er PC 3.1)" "ebNewBandWidth_.www.thestreet.com=1223%3A1135092224453;
>> TestPerm=Yes; NSC_d1430c890050=c0a81a7f0050; FV=OID-|PID
>> -|MID-|PUC-YAHOO|DATE-437E1F9B; BRIS=82.0D.04.77|437E1F9B30BC;
>> DMSEG=CE17A0B55FFFCDD2&D04452&43BC651C&43C33964&35&10051,10027
>> ,10

This logfile line starts with h" but doesn't end with "

>> C:                    *

(That * should have been under the 80 - it was when I tried it)

>> C: "69.56.141.66 - - [08/Jan/2006:23:59:50 -0500] 80 "GET
>> /feeds/rss/index.xml HTTP/1.0" 200 0 "-" "WordPress/1.5.1.3" "-" 0"

This line does have a " at the beginning and end, but also has an 80 that
isn't in the logformat.


APACHELOGFORMAT ("%h %l %u %t %j "%r" %s %b "%{Referer}i" "%{User-Agent}i"
"%{Cookie}i" %T")

would do the job.

Aengus

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to