You can do one of two things, depending on what you want. To see a report of all traffic for the account 'A-35815', just use that in your log format instead of %j. Analog will ignore all other lines in the report.
LOGFORMAT (%S %Y-%m-%d %h:%n:%j %j %u 'A-35815' %j %r %c %t %b '%B') To see a report of all accounts on the system, you can 'hijack' a variable for a report you are not using. In your example you could use %v (Virtual Hosts) and then turn on the Virtual Host report to see results for top accounts. LOGFORMAT (%S %Y-%m-%d %h:%n:%j %j %u %v %j %r %c %t %b '%B') VHOST ON -- Jeremy Wadsack On Thu, Nov 19, 2009 at 4:10 PM, David Paul <david.p...@vertexna.com> wrote: > Is there a way to setup the LOGFORMAT, such that it can accept an > “unrecognized type”, such as an account number. Currently, I have the > following log format setup, but want to be able to run reports utilizing the > account number ‘A-35815' instead of ignoring it.. > > > > LOGFORMAT (%S %Y-%m-%d %h:%n:%j %j %u %j %j %r %c %t %b '%B') > > > > 172.17.16.198 2009-09-04 18:31:20 '25368CAA5FF08DE4855FA7E1A8BDAD7D' > 'WINDERA' 'A-35815' POST /nextthing/start.seam/ 200 0.563 107470 > 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.13) > Gecko/2009073022 Firefox/3.0.13 (.NET CLR 3.5.30729)' > > > > Thanks for the Help > > > > David > The information contained in this email is intended only for the > individual to whom it is addressed. It may contain privileged and/or > confidential information.If you have received this message in error please > notify the sender immediately and delete the message from your computer. The > unauthorised use, disclosure, copying or alteration of this message is > forbidden. The sender will not be liable for direct, special, indirect or > consequential damage as a result of any virus being passed on, or arising > from alteration of the contents of this message by a third party. > www.vertexna.com > > +------------------------------------------------------------------------ > | TO UNSUBSCRIBE from this list: > | http://lists.meer.net/mailman/listinfo/analog-help > | > | Analog Documentation: http://analog.cx/docs/Readme.html > | List archives: http://www.analog.cx/docs/mailing.html#listarchives > | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general > +------------------------------------------------------------------------ > >
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
