On Tuesday, March 14, 2006 7:16 AM [EDT], Brereton, Stephen <[EMAIL PROTECTED]> wrote:
> Thanks - sorted it! > NB: Is there a way to > 1) distinguish between POST and GET ? Can't see any commands to do > with method Analog doesn't have a "method" field, and mormally treats the method as junk. (It's marked as %j in all the standard LOGFORMATs). If you wanted to get a count of POSTs versus GETs, you'd have to create a custom LOGFORMAT that used an otherwise unused field (%u is the usual candidate) for the method field. If, on the other hand, you want to ignore POSTs (for whatever reason), you could create 2 LOGFORMATs, like this: LOGFORMAT (%jPOST %j) LOGFORMAT (%Y-%m-%d %h:%n:%j %S %j %r %c) The first will discard all the lines with POST in them, the second will analyze all the other lines in the logfile. You have to specify the LOGFORMAT in this case, Analog won't auto-recognize the format once you've specified a LOGFORMAT. > 2) I'm detecting some duff status values (1 as opposed to 30 or 401) > , being returned by a dodgy .dll we used for a few months. Is there a > way to get this ignored? If that .dll always returns a status of 1, you can just FILEEXCLUDE that file. If it only does that sometimes, and you only want to exclude the times it returns one, you can use the same technique as above, and create a LOGFORMAT that will match 1 in the status field, and mark everything else as junk. Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
