Re: [analog-help] IIS Logformat

2000-03-07 Thread Stephen Turner

On Tue, 7 Mar 2000, Mark Hoy wrote:

 Hello,
 
 I've spent several days looking thru FAQ's and modifying the analog.cfg but
 to no avail. I cannot seem to get the logformat correct for my logiles:
 
 LOGFORMAT (%Y-%m-%d %h:%n:%j %S %u %v %j %r %q %c %j %b %T %j %j %A %j %f)
 
 The first few lines of my log file are:
 
 #Software: Microsoft Internet Information Server 4.0
 #Version: 1.0
 #Date: 2000-03-01 09:41:59
 #Fields: date time c-ip cs-username s-ip cs-method cs-uri-stem cs-uri-query
 sc-status sc-bytes cs-bytes time-taken s-port cs-version cs(User-Agent)
 cs(Cookie) cs(Referer)
 2000-03-01 09:41:59 194.112.55.162 - 216.122.86.216 GET
 /Stylesheets/Style.css - 200 489 438 297 80 HTTP/1.1
 Mozilla/4.0+(compatible;+MSIE+4.5;+Mac_PowerPC)
 ASPSESSIONIDGMGE=GPNDEJLBFNKPEDOGNPJHNLKI
 http://www.calthorpe.co.uk/Display.asp?key=19
 2000-03-01 09:42:03 194.112.55.162 - 216.122.86.216 GET
 /Property-images/17highfieldrd.jpg - 200 14241 450 3016 80 HTTP/1.1
 Mozilla/4.0+(compatible;+MSIE+4.5;+Mac_PowerPC)
 ASPSESSIONIDGMGE=GPNDEJLBFNKPEDOGNPJHNLKI
 http://www.calthorpe.co.uk/Display.asp?key=19
 
 

That LOGFORMAT analyses that logfile fine (assuming the fields are separated
by spaces, not tabs). Did you put the LOGFORMAT command before the LOGFILE
command?

-- 
Stephen Turner   http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
"8th March 2000. National No Smoking Day. Ash Wednesday." (On a calendar)


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/




RE: [analog-help] IIS Logformat

2000-03-07 Thread Grahame Fendle

I had a similar problem recently, but I know from experience that analog
reads IIS logs fine. Are you using Active Server Pages? I needed to add:

PAGEINCLUDE *.asp

to my CFG file.

Grahame Fendle

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mark Hoy
Sent: 07 March 2000 09:08
To: analog help
Subject: [analog-help] IIS Logformat


Hello,

I've spent several days looking thru FAQ's and modifying the analog.cfg but
to no avail. I cannot seem to get the logformat correct for my logiles:

LOGFORMAT (%Y-%m-%d %h:%n:%j %S %u %v %j %r %q %c %j %b %T %j %j %A %j %f)

The first few lines of my log file are:

#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 2000-03-01 09:41:59
#Fields: date time c-ip cs-username s-ip cs-method cs-uri-stem cs-uri-query
sc-status sc-bytes cs-bytes time-taken s-port cs-version cs(User-Agent)
cs(Cookie) cs(Referer)
2000-03-01 09:41:59 194.112.55.162 - 216.122.86.216 GET
/Stylesheets/Style.css - 200 489 438 297 80 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+4.5;+Mac_PowerPC)
ASPSESSIONIDGMGE=GPNDEJLBFNKPEDOGNPJHNLKI
http://www.calthorpe.co.uk/Display.asp?key=19
2000-03-01 09:42:03 194.112.55.162 - 216.122.86.216 GET
/Property-images/17highfieldrd.jpg - 200 14241 450 3016 80 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+4.5;+Mac_PowerPC)
ASPSESSIONIDGMGE=GPNDEJLBFNKPEDOGNPJHNLKI
http://www.calthorpe.co.uk/Display.asp?key=19


Analog produces a blank report. It doesn't seem to pick up the time. Can
anyone shed some light on this for me?

thanks for your help,

Mark



This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/




This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/




Re: [analog-help] IIS Logformat

2000-03-07 Thread Aengus Lawlor

Mark Hoy wrote:
I've spent several days looking thru FAQ's and modifying the analog.cfg but 
to no avail. I cannot seem to get the logformat correct for my logiles:

LOGFORMAT (%Y-%m-%d %h:%n:%j %S %u %v %j %r %q %c %j %b %T %j %j %A %j %f)

The first few lines of my log file are:

#Software: Microsoft Internet Information Server 4.0 
#Version: 1.0
#Date: 2000-03-01 09:41:59
#Fields: date time c-ip cs-username s-ip cs-method cs-uri-stem cs-uri-query 
sc-status sc-bytes cs-bytes time-taken s-port cs-version cs(User-Agent) 
cs(Cookie) cs(Referer)

You don't need a LOGFORMAT line if you are using the W3C Extended log format, 
because Analog will  recognize the #Fields line, and use it to interpret the 
logfile.

(You probably don't need some of the fields that you logging, either).

Analog produces a blank report. It doesn't seem to pick up the time. 
Can anyone shed some light on this for me?

Add  SETTINGS ON to your ANALOG.CFG, and make sure that you are actually 
running the report you think you are running - the right log file, and 
appropriate inclusions/exclusions.

Aengus

This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/