On Friday, January 05, 2007 3:38 AM [EDT],
Eric Delore <[EMAIL PROTECTED]> wrote:

Dear [email protected],

My server says my apache logs are in the following format:

#The raw log files are in Apache format:
#CustomLog /var/log/httpd/access_log "%{Host}i %h %l %u %t \"%r\" %s
%b %v \"%{Referer}i\" \"%{User-agent}i\"

When I issue the following command in my analog.cfg file, I get an
error complaining that one item appears twice:

APACHELOGFORMAT (%{Host}i %h %l %u %t \"%r\" %s %b %v \"%{Referer}i\"
\"%{User-agent}i\)

Is this log format parsable by Analog?

Change the second occurrence of the item that is repeated twice (%h) to %j.

Analog makes the fairly reasonable assumption that if it thinks that a field has been repeated twice, it is probably misinterpreting the logformat, and that you should give it better information before it proceeds, as it would have no way of choosing the "correct" field if some entries have different data in those fields.

APACHELOGFORMAT (%{Host}i %j %l %u %t \"%r\" %s %b %v \"%{Referer}i\" \"%{User-agent}i\)

Aengus

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to