On Wednesday, August 09, 2006 5:59 PM [EDT], joe park <[EMAIL PROTECTED]> wrote:
Hello, Here is a example -- for requests like /test/test.gif?id1=123&id2=abc&a=1&b=2&c=3 /test/test.gif?id1=123&id2=abc&a=1&c=3 /test/test.gif?id1=123&id2=abc&a=1&d=2&e=3 /test/test.gif?id1=124&id2=def&a=1&b=2&c=3 /test/test.gif?id1=124&id2=def&a=1 /test/test.gif?id1=124&id2=def&a=1&b=2 /test/test.gif?id1=124&id2=ghi&a=1&b=2&c=3 /test/test.gif?b=2&c=3&id1=124&id2=ghi&a=1 I only care for "id1", "id2", and "a" parameters and would like request report to aggregated the request count if only those 3 parameters are same -- r,lRB,2,3,915,/test/test.gif?id1=123&id2=abc&a=1 r,lRB,2,3,915,/test/test.gif?id1=124&id2=def&a=1 r,lRB,2,2,610,/test/test.gif?id1=124&id2=ghi&a=1 Parameters with arbitrary name are being attached by 3rd party and I can't anticipate / control them -- both the name of the parameters and where it's being attached (beginning of query? end of query?) Any solution within analog? Like Jeremy suggested, maybe I'll have to write little perl script to pre-process the logs.
Because you can only apply one alias to a request, I think you would probably have to preprocess your logs. I'm still not entirely sure that I understand the problem, but I don't think you can solve the problem using thr "cascading" alias method I mentioned earlier, and I can't see how you would use regular expressions in Analog to resolve it either.
Aengus
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
