Public bug reported: We have a mostly idle (historical) site that we still run awstats over. These days, for reasons I've yet to derermine, it generates a lot of 408 responses, e.g.:
| 91.189.88.12 - - [01/Dec/2011:12:54:56 +0000] "-" 408 4808 "-" "-" If enough of these are at the start of the logfile, awstats chokes on the file: | AWStats did not find any valid log lines that match your LogFormat parameter, in the 50th first non commented lines read of your log. | Your log file /usr/share/doc/awstats/examples/logresolvemerge.pl /srv/webstats.canonical.com/logs/SERVER_NAME/SITE_NAME* | must have a bad format or LogFormat parameter setup does not match this format. | Your AWStats LogFormat parameter is: | 1 | This means each line in your web server log file need to have "combined log format" like this: | 111.22.33.44 - - [10/Jan/2001:02:14:14 +0200] "GET / HTTP/1.1" 200 1234 "http://www.fromserver.com/from.htm"; "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" | And this is an example of records AWStats found in your log file (the record number 50 in your log): | 91.189.88.12 - - [01/Dec/2011:13:10:24 +0000] "-" 408 4808 "-" "-" | Setup ('/etc/awstats/awstats.SITE_NAME.conf' file, web server or permissions) may be wrong. | Check config file, permissions and AWStats documentation (in 'docs' directory). We're using LogFormat=1 and AFAIK the line quoted is valid combined log format data. ** Affects: awstats (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to awstats in Ubuntu. https://bugs.launchpad.net/bugs/908901 Title: awstats confused by 408 entries in apache log files To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/awstats/+bug/908901/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
