Hi Aengus,
This thing with the [] doesn't really seem to be working... I'm guessing I
need to change to LOGFORMAT and figure out how to translate that
APACHELOGFORMAT string into an analog string?
J.
On 11/17/07 7:59 AM, "Aengus" <[EMAIL PROTECTED]> wrote:
> At Friday, November 16, 2007 9:08 PM, Joshua S. Freeman
> <[EMAIL PROTECTED]> wrote:
>
>> Hi,
>>
>> I've read the Analog docs pretty closely. I've used Analog on and
>> off over the last 10 years and am always pleased to come back...
>>
>> Here are the facts:
>>
>> Httpd.conf logformat line:
>>
>> LogFormat "%h %l %u %t \"(%r)\" %>s %b \"(ref %{Referer}i)\" \
>> \"(client %{User-agent}i)\" \"(elapsed %D)\"" mainserver
>>
>>
>> What I put in my analog.cfg file:
>>
>> APACHELOGFORMAT (%h %l %u %t \"(%r)\" %>s %b \"(ref %{Referer}i)\"
>> \"(client %{User-agent}i)\" \"(elapsed %D)\")
>>
>>
>> Which, as far as I can read, *should* work.. However, when I run
>> analog:
>>
>> $ analog -G +g./analog.cfg -v
>> analog: analog version 6.0/Unix
>> analog: Warning C: Too many arguments for configuration command:
>> ignoring end of line starting:
>> APACHELOGFORMAT (%h %l %u %t \"(%r) \"
>> (For help on all errors and warnings, see docs/errors.html)
>
> You're using () as a delimiter for your LOGFORMAT, even though you have ()
> characters in the format string. Use a different delimiter, such as [].
>
> APACHELOGFORMAT [%h %l %u %t \"(%r)\" %>s %b \"(ref %{Referer}i)\"
> \"(client %{User-agent}i)\" \"(elapsed %D)\"]
>
>> analog: Warning C: Ignoring long configuration line starting
>> # cuscon11608.tstt.net.tt - - [04/Nov/2007:00:00:06 -0400] "(GET
>> /imag
>
> You probably put a line from your logfile into the .cfg so you could
> compare it to your LOGFORMAT.
>
>> analog: Warning M: Logfile /u/2/j/jf2412/logfiles/*.20071110
>> contains lines with no bytes: byte counts may be low
>
> Many of the reports will report on the bytes transferred - if you're not
> recording that information, Analog can't report on it.
>
>> I do see that the hosts.txt file I set up is getting bigger and
>> bigger so SOMETHING's happening..
>>
>> Of course I won't know until the file is done being parsed, etc.. But
>> I'm concerned about this error... Is there ANYTHING you can suggest I
>> do to make analog happier with the apache logformat?
>
> That sounds like you're having Analog do it's own DNS lookups. You really
> need to look into some of the DNS Helper apps that will create the
> "hosts.txt" file for you much faster than Analog can do on it's own.
>
> http://www.analog.cx/helpers/#dns
>
> Aengus
>
> +------------------------------------------------------------------------
> | TO UNSUBSCRIBE from this list:
> | http://lists.meer.net/mailman/listinfo/analog-help
> |
> | Analog Documentation: http://analog.cx/docs/Readme.html
> | List archives: http://www.analog.cx/docs/mailing.html#listarchives
> | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
> +------------------------------------------------------------------------
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------