I am trying to follow the CIS Security Configuration Benchmark for Apache Web Server 2.2.0. I have a new apache install using RedHat EL 5.3. The httpd version is 2.2.3. The configuration benchmark recommends adding a parameter to the combined log file for Accept. The line I am using is:
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i\" \"%{User-Agent}i\"" combined I am unable to find a parameter in the Analog documentation that matches. I tried using this line in my analog.cfg, following the instruction in the web documentation: APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i \" \"%{User-Agent}i\") but that results in a Turning off empty time reports message and no lines are read. Here is a sample of the log file: obshough.bio.ou.edu - - [07/Jul/2009:15:52:14 -0500] "GET /opportun.html HTTP/1. 1" 200 7541 "text/html,application/xhtml +xml,application/xml;q=0.9,*/*;q=0.8" "h ttp://pincel.ou.edu/" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Geck o/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11" Is analog able to read log files in this format? Can it analyze the accept parameter? What is the proper LOGFORMAT statement? Any help would be appreciated. Dan -- Dan Hough email:dho...@ou.edu Oklahoma Biological Survey Norman, OK 73019 +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------