I have been trying to use Analog 6.0 to analyze our ISA log files. Analog seems to be recognizing the format as a W3 extended format because I get the following in my errors.txt file
F: Opening e:\stattest\ISALOG_20070318_WEB_000.w3c as logfile F: Detect that it's in W3 extended format However I am having no luck generating statistics for these logfiles. I am attaching a partial txt file generated by analog. I also get the following message at the beginning when I first run analog. analog: Warning C: Too many arguments for configuration command: ignoring end of line starting: OUTFILE e:\analog 6.0\stats\Report.html (For help on all errors and warnings, see docs/errors.html) F: Opening errors.txt as new ERRFILE analog: Warning E: Redirecting future diagnostic messages to errors.txt Any help with this would be greatly appreciated. Thanks - Aimee
C: 68.109.114.184 anonymous Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) 2007-03-18 00:00:08 TORCHEMADA - mail.edc.uri.edu 131.128.90.34 80 1 421 290 http POLL http://131.128.90.34/exchange/kathy/Inbox Inet 401 Outlook Webmail Access - External - 0x400 Allowed C: * C: 68.109.114.184 anonymous Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) 2007-03-18 00:00:08 TORCHEMADA - mail.edc.uri.edu 131.128.90.34 80 1 504 429 http POLL http://131.128.90.34/exchange/kathy/Inbox Inet 401 Outlook Webmail Access - External - 0x480 Allowed C: * C: 68.109.114.184 anonymous Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) 2007-03-18 00:00:09 TORCHEMADA - mail.edc.uri.edu 131.128.90.34 80 250 652 529 http POLL http://131.128.90.34/exchange/kathy/Inbox Inet 207 Outlook Webmail Access - External - 0x580 Allowed C: * C: 68.142.212.171 anonymous Yahoo-MMCrawler/3.x (mms dash mmcrawler dash support at yahoo dash inc dot com) 2007-03-18 00:00:11 TORCHEMADA - www.edc.uri.edu 131.128.90.11 80 31 242 183 http GET http://131.128.90.11/riatlas/town/Maps/large/jo_overview.GIF Inet 304 www.edc.uri.edu - External - 0x100 Allowed C: * C: 131.128.90.51 anonymous Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2 2007-03-18 00:00:18 TORCHEMADA - 72.14.217.91 72.14.217.91 80 438 1067 11934 http GET http://72.14.217.91/safebrowsing/update?client=navclient-auto-ffox2.0.0.2&mozver=1.8.1.2-2007021917&version=goog-white-domain:1:19,goog-white-url:1:371,goog-black-url:1:9342,goog-black-enchash:1:20709 Inet 200 Internal to Internet - Internal External 0x400 Allowed C: * C: 68.142.212.171 anonymous Yahoo-MMCrawler/3.x (mms dash mmcrawler dash support at yahoo dash inc dot com) 2007-03-18 00:00:27 TORCHEMADA - www.edc.uri.edu 131.128.90.11 80 1 242 181 http GET http://131.128.90.11/riatlas/Town/Maps/large/ex_overview.GIF Inet 304 www.edc.uri.edu - External - 0x100 Allowed C: * C: 64.124.85.73 anonymous Mozilla/5.0 (compatible; BecomeBot/3.0; +http://www.become.com/site_owners.html) 2007-03-18 00:00:31 TORCHEMADA - www.ci.uri.edu 131.128.90.19 80 1 331 375 http GET http://131.128.90.19/robots.txt Inet 200 www.ci.uri.edu - External - 0x500 Allowed C: * C: 68.229.67.97 anonymous Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; WOW64) 2007-03-18 00:00:37 TORCHEMADA - mail.edc.uri.edu 131.128.90.34 80 1 426 290 http POLL http://131.128.90.34/exchange/greg/Inbox Inet 401 Outlook Webmail Access - External - 0x400 Allowed C: * C: 68.229.67.97 anonymous Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; WOW64) 2007-03-18 00:00:37 TORCHEMADA - mail.edc.uri.edu 131.128.90.34 80 1 509 429 http POLL http://131.128.90.34/exchange/greg/Inbox Inet 401 Outlook Webmail Access - External - 0x480 Allowed C: * C: 68.229.67.97 anonymous Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; WOW64) 2007-03-18 00:00:38 TORCHEMADA - mail.edc.uri.edu 131.128.90.34 80 156 657 528 http POLL http://131.128.90.34/exchange/greg/Inbox Inet 207 Outlook Webmail Access - External - 0x580 Allowed C: * C: 65.55.212.190 anonymous msnbot-media/1.0 (+http://search.msn.com/msnbot.htm) 2007-03-18 00:00:54 TORCHEMADA - www.ci.uri.edu 131.128.90.19 80 1 407 1218 http GET http://131.128.90.19/projects/rifish/Meetings/Mar3101/R_Allen/DA1/tsld019.htm Inet 200 www.ci.uri.edu - External - 0x500 Allowed C: * C: 66.249.72.197 anonymous Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2007-03-18 00:01:01 TORCHEMADA - odonata.edc.uri.edu 131.128.90.26 80 391 287 837 http GET http://131.128.90.26/cgi-bin/gforum/gforum.cgi?do=message;username=Erik;guest=84675 Inet 302 odonata.edc.uri.edu web publishing - External - 0x400 Allowed C: * C: 72.30.177.189 anonymous Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 2007-03-18 00:01:13 TORCHEMADA - www.edc.uri.edu 131.128.90.11 80 62 261 182 http GET http://131.128.90.11/training/gis/av_schedule.html Inet 304 www.edc.uri.edu - External - 0x100 Allowed
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------

