I am trying to follow the CIS Security Configuration Benchmark for
Apache Web Server 2.2.0.  I have a new apache install using RedHat EL
5.3.  The httpd version is 2.2.3.  The configuration benchmark
recommends adding a parameter to the combined log file for Accept.  The
line I am using is:

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i\"
\"%{User-Agent}i\"" combined

I am unable to find a parameter in the Analog documentation that
matches.  I tried using this line in my analog.cfg, following the
instruction in the web documentation:

APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i
\" \"%{User-Agent}i\")

but that results in a Turning off empty time reports message and no
lines are read.

Here is a sample of the log file:

obshough.bio.ou.edu - - [07/Jul/2009:15:52:14 -0500] "GET /opportun.html
HTTP/1.
1" 200 7541 "text/html,application/xhtml
+xml,application/xml;q=0.9,*/*;q=0.8" "h
ttp://pincel.ou.edu/" "Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.9.0.11) Geck
o/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11"


Is analog able to read log files in this format?  Can it analyze the
accept parameter?  What is the proper LOGFORMAT statement?

Any help would be appreciated.

Dan

-- 
Dan Hough                       email:dho...@ou.edu
Oklahoma Biological Survey
Norman, OK  73019

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to