Thanks. Glad to know the problem is not the format. I will try to see what else is causing the problem.
Dan On Wed, 2009-07-08 at 18:46 -0500, Aengus wrote: > Roger <[email protected]> wrote: > > Dan Hough wrote: > >> I am trying to follow the CIS Security Configuration Benchmark for > >> Apache Web Server 2.2.0. I have a new apache install using RedHat EL > >> 5.3. The httpd version is 2.2.3. The configuration benchmark > >> recommends adding a parameter to the combined log file for Accept. > >> The line I am using is: > >> > >> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i\" > >> \"%{User-Agent}i\"" combined > >> > >> I am unable to find a parameter in the Analog documentation that > >> matches. I tried using this line in my analog.cfg, following the > >> instruction in the web documentation: > >> > >> APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" > >> \"%{Referer}i \" \"%{User-Agent}i\") > > > > Just a guess, but the quotes inside the quotes in the 1st, LogFormat, > > statement are 'quoted' (represented as \") because otherwise they'd be > > treated as delimiters instead of characters. In the APACHELOGFORMAT > > line, they are still quoted, though there are no 'outside' quote > > marks, so I'd guess they are redundant. This line uses brackets to > > delimit the text not quote marks. > > > > It may be worth trying that line without the backslashes: > > > > APACHELOGFORMAT (%h %l %u %t "%r" %>s %b "%{Accept}i" "%{Referer}i" > > "%{User-Agent}i") > > Analog is able to parse out the escape "quotes", and the APACHELOGFORMAT line > works with the sample line that Dan posted, with or without the \'s. > > I just copied the sample line into a file, added the APACHELOGFORMAT entry > and a LOGFILE entry to my analog.cfg, and generated a report. > > Whatever is causing the empty report, it's not the format. > > Aengus > > +------------------------------------------------------------------------ > | TO UNSUBSCRIBE from this list: > | http://lists.meer.net/mailman/listinfo/analog-help > | > | Analog Documentation: http://analog.cx/docs/Readme.html > | List archives: http://www.analog.cx/docs/mailing.html#listarchives > | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general > +------------------------------------------------------------------------ -- Dan Hough email:[email protected] Oklahoma Biological Survey Norman, OK 73019 +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
