|
Hi,
I have a logfile that is processsable by Mach5 Analyzer but
will not work with Analog, I have tried various logformat commands as it is
unable to auto detect the format but can't seem to get it right, below are
some sample lines:
72.30.177.10 - - [02/Jan/2006:00:09:57 +0100] "GET /robots.txt
HTTP/1.0" 404 1985 www.bluebeehive.com
"-" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)"
"-"
72.30.177.20 - - [02/Jan/2006:00:09:58 +0100] "GET /Stock_pages/Index_pages/Main_Items_index.html HTTP/1.0" 304 - www.bluebeehive.com "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" "-" 202.160.180.179 - - [02/Jan/2006:00:32:33 +0100] "GET /us HTTP/1.0" 301 229 www.friouk.biz "-" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html)" "-" 202.160.180.179 - - [02/Jan/2006:00:32:34 +0100] "GET /us/ HTTP/1.0" 200 12645 www.friouk.biz "-" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html)" "-" 202.160.180.175 - - [02/Jan/2006:00:32:37 +0100] "GET /robots.txt HTTP/1.0" 404 1985 www.friouk.biz "-" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html)" "-" 202.160.180.172 - - [02/Jan/2006:00:32:38 +0100] "GET /us HTTP/1.0" 301 229 www.friouk.biz "-" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html)" "-" 202.160.180.172 - - [02/Jan/2006:00:32:39 +0100] "GET /us/ HTTP/1.0" 200 12645 www.friouk.biz "-" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html)" "-" 154.5.92.181 - - [02/Jan/2006:00:48:24 +0100] "GET /uk/ HTTP/1.1" 200 11196 www.friouk.biz "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:48:24 +0100] "GET /uk/av/logo.jpg HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:48:25 +0100] "GET /uk/av/back.jpg HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:48:25 +0100] "GET /av/back.jpg HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:48:25 +0100] "GET /uk/av/arrow.jpg HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:48:25 +0100] "GET /uk/av/indiv.jpg HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:48:25 +0100] "GET /av/medex.gif HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:49:03 +0100] "GET /uk/contact.php HTTP/1.1" 200 7721 www.friouk.biz "http://www.friouk.biz/uk/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:49:04 +0100] "GET /uk/av/logo.jpg HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/contact.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:49:04 +0100] "GET /uk/av/back.jpg HTTP/1.1" 304 - www.friouk.biz "http://www.friouk.biz/uk/contact.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" 154.5.92.181 - - [02/Jan/2006:00:49:04 +0100] "GET /uk/av/back2.jpg HTTP/1.1" 200 526 www.friouk.biz "http://www.friouk.biz/uk/contact.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705)" "-" I have tried the following format commands:
LOGFORMAT %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c
%b\n
LOGFORMAT %S %j %j [%d/%M/%Y:%h:%n:%j] %v "%j%w%r%wHTTP%j" %c %b\n but am now getting the follwing error report:
F: Closing configuration file C:\dotnet works\hosting\analog
6.0\analog.cfg
C:\dotnet works\hosting\analog 6.0\analog.exe: Warning M: Logfile C:\dotnet works\hosting\analog 6.0\logfile2.log contains lines with no file names: page counts may be low C:\dotnet works\hosting\analog 6.0\analog.exe: Warning M: Logfile C:\dotnet works\hosting\analog 6.0\logfile2.log contains lines with no bytes: byte counts may be low F: Opening C:\dotnet works\hosting\analog 6.0\lang\uk.lng as language file F: Closing language file C:\dotnet works\hosting\analog 6.0\lang\uk.lng F: Opening C:\dotnet works\hosting\analog 6.0\lang\ukdom.tab as domains file F: Closing domains file C:\dotnet works\hosting\analog 6.0\lang\ukdom.tab F: Opening C:\dotnet works\hosting\analog 6.0\lang\ukdesc.txt as report descriptions file F: Closing report descriptions file C:\dotnet works\hosting\analog 6.0\lang\ukdesc.txt F: Opening C:\dotnet works\hosting\analog 6.0\logfile2.log as logfile F: Closing logfile C:\dotnet works\hosting\analog 6.0\logfile2.log S: Successful requests: 0 S: Redirected requests: 0 S: Failed requests: 0 S: Requests returning informational status code: 0 S: Status code not given: 3751 S: Unwanted lines: 0 S: Corrupt lines: 0 S: No times in logfile F: Opening C:\dotnet works\hosting\analog 6.0\Report.html as output file C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty time reports C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty Request Report C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty File Type Report C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty Directory Report C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty Search Word Report C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty Operating System Report C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty File Size Report C:\dotnet works\hosting\analog 6.0\analog.exe: Warning R: Turning off empty Any ideas?
Thanks,
Chris
|
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
