thanks - I'll give that a try. -----Original Message----- From: Aengus [mailto:[EMAIL PROTECTED] Sent: 14 March 2006 12:58 To: Support for analog web log analyzer Subject: Re: [analog-help] Logfile format driving me round the bend
On Tuesday, March 14, 2006 7:16 AM [EDT], Brereton, Stephen <[EMAIL PROTECTED]> wrote: > Thanks - sorted it! > NB: Is there a way to > 1) distinguish between POST and GET ? Can't see any commands to do > with method Analog doesn't have a "method" field, and mormally treats the method as junk. (It's marked as %j in all the standard LOGFORMATs). If you wanted to get a count of POSTs versus GETs, you'd have to create a custom LOGFORMAT that used an otherwise unused field (%u is the usual candidate) for the method field. If, on the other hand, you want to ignore POSTs (for whatever reason), you could create 2 LOGFORMATs, like this: LOGFORMAT (%jPOST %j) LOGFORMAT (%Y-%m-%d %h:%n:%j %S %j %r %c) The first will discard all the lines with POST in them, the second will analyze all the other lines in the logfile. You have to specify the LOGFORMAT in this case, Analog won't auto-recognize the format once you've specified a LOGFORMAT. > 2) I'm detecting some duff status values (1 as opposed to 30 or 401) > , being returned by a dodgy .dll we used for a few months. Is there a > way to get this ignored? If that .dll always returns a status of 1, you can just FILEEXCLUDE that file. If it only does that sometimes, and you only want to exclude the times it returns one, you can use the same technique as above, and create a LOGFORMAT that will match 1 in the status field, and mark everything else as junk. Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------ * * * * * * * * * * * * This communication is from City of York Council. The information contained within, and in any attachment(s), is confidential and legally privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s), please note that any form of distribution, copying or use of this communication, or the information within, is strictly prohibited and may be unlawful. Equally, you must not disclose all, or part, of its contents to any other person. If you have received this communication in error, please return it immediately to the sender, then delete and destroy any copies of it. City of York Council disclaims any liability for action taken in reliance on the content of this communication. +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
