On Friday, January 05, 2007 3:38 AM [EDT],
Eric Delore <[EMAIL PROTECTED]> wrote:
Dear [email protected],
My server says my apache logs are in the following format:
#The raw log files are in Apache format:
#CustomLog /var/log/httpd/access_log "%{Host}i %h %l %u %t \"%r\" %s
%b %v \"%{Referer}i\" \"%{User-agent}i\"
When I issue the following command in my analog.cfg file, I get an
error complaining that one item appears twice:
APACHELOGFORMAT (%{Host}i %h %l %u %t \"%r\" %s %b %v \"%{Referer}i\"
\"%{User-agent}i\)
Is this log format parsable by Analog?
Change the second occurrence of the item that is repeated twice (%h) to %j.
Analog makes the fairly reasonable assumption that if it thinks that a field
has been repeated twice, it is probably misinterpreting the logformat, and
that you should give it better information before it proceeds, as it would
have no way of choosing the "correct" field if some entries have different
data in those fields.
APACHELOGFORMAT (%{Host}i %j %l %u %t \"%r\" %s %b %v \"%{Referer}i\"
\"%{User-agent}i\)
Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------