On Friday, April 07, 2006 1:50 AM [EDT], Peter Levan <[EMAIL PROTECTED]> wrote:
> I think I may have found a bug in analog - or maybe it's just a > corrupt log entry. I have been using analog quite successfully for a > number of years now without problem. > A recent log file I tried to process causes analog to not recognise > the logfile format. I've narrowed it down to the first line of the > log file - if i move/remove the line then analog processes the log > file properly. I am using Analog 6.0/Win32 > The log line that is not recognised appears below: Running analog on a > log file containing just this line causes it to print the following > warning: >>> Warning F: Can't auto-detect format of logfile > g:\elib\webStats\web.aic.gov.au\test.log: ignoring it > 193.0.125.157 - - [01/Feb/2006:00:01:22 +1100] "GET > /search/(\"http://www.aic.gov.au/ie5mac.css\") HTTP/1.1" 404 - > Is there anything in this line that would cause the detection to fail? The quotes in the middle of a quoted string are the problem, I think. If you specify the request as demarked with spaces, you can interpret the line, but I guess the auto-detect code breaks the line into tokens first, and breaks tokens at spaces and ". logformat (%S %j[%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b "%f" "%B") will interpret the line properly. Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------

