Aengus,
Looks like the problem is with the fact that I am using UNIX for
processing. It does not work on my system regardless. I follow all
your instructions. Here is the output from running the analog.
OUTPUT
--------------------------------------------------------
bash-2.05$ ./analog -O- /tmp/analog_bug.sample.log
./analog: analog version 6.0/Unix
F: Closing configuration file /software/Analog/analog.cfg
./analog: Warning D: In Daily Report, GRAPH (P) isn't included in COLS
(For help on all errors and warnings, see docs/errors.html)
F: Opening /software/Analog/lang/uk.lng as language file
F: Closing language file /software/Analog/lang/uk.lng
F: Opening /software/Analog/lang/ukdom.tab as domains file
F: Closing domains file /software/Analog/lang/ukdom.tab
F: Opening /software/Analog/lang/ukdesc.txt as report descriptions file
F: Closing report descriptions file /software/Analog/lang/ukdesc.txt
F: Opening /tmp/analog_bug.sample.log as logfile
./analog: Warning F: Can't auto-detect format of logfile
/tmp/analog_bug.sample.
log: ignoring it
F: Closing logfile /tmp/analog_bug.sample.log
S: Successful requests: 0
S: Redirected requests: 0
S: Failed requests: 0
S: Requests returning informational status code: 0
S: Status code not given: 0
S: Unwanted lines: 0
S: Corrupt lines: 0
F: Opening stdout as output file
./analog: Warning R: Turning off empty time reports
./analog: Warning R: Turning off empty Status Code Report
x,VE,analog 6.0
x,HN,[my organisation]
Analog.cfg
------------------------------
DEBUG ON
LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b)
LOGFORMAT (%S - %u\n [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b)
LOGFILE /tmp/analog_bug.sample.log
Thanks.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Aengus
Sent: Monday, August 28, 2006 5:23 PM
To: Support for analog web log analyzer
Subject: Re: [analog-help] Analog Bug (Updated)
On Monday, August 28, 2006 4:51 PM [EDT],
Shulkin, Vadim <[EMAIL PROTECTED]> wrote:
> FYI,
> I found very strange reaction of the analog to the log files
> contain "\r" characters inside the log line. If it's DOS/Windows EOF
> style why analog reacts different to a single character "\r", which
> is only in combination with "\n" considered to be EOF. If it's UNIX
> type of EOF why this character forces analog to split lines and
> report:
>
> ./analog: Warning F: Can't auto-detect format of log file
> ./analog_bug.sample.log: ignoring it
>
> I think the problem is inside input.c file where it tries to parse
> the logline. I would probably find the problem myself, but it will
> take much more time for me then for you to identify the problem. I
> will appreciate the help and attaching 10 lines of logs from my
> server, so you can see for yourself. Take a look at the end of the
> third field. There is a "\r" at the end.
>
> If I pass the file though DOS2UNIX utility, everything is working
> fine after that. Such an arrangement is very, very inconvenient for
> me, because will require double processing plus arrangement of
> non-standard situation. I prefer to fix and re-compile analog and
> not to change anything else.
"Can't auto-detect format of log file" isn't a bug - it just means that
you
have a non-standard logfile that Analog doesn't recognize, and none of
the
standard logformats that Analog recognizes have a newline in the middle.
The "bug" appears to be in your web server, which includes a terminating
\r
in the username field when a user is authenticated. You can work around
this
by manually specifying the LOGFORMAT that Analog should use. You need to
specify 2 LOGFORMATs, one for the normal lines, and one for the lines
that
your webserver is adding a newline to.
These lines in my analog.cfg allow me to parse your sample logfile (on
Windows).
LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b)
LOGFORMAT (%S - %u\n [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b)
logfile \temp\analog_bug.sample.log
The second LOGFORMAT tells Analog that some of the lines it needs to
parse
will have an extraneous newline character after the Username field.
Aengus
+-----------------------------------------------------------------------
-
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+-----------------------------------------------------------------------
-
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
