That indeed was it! I tried it later in the evening and it worked. Thanks
for the guidance.
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jason Linhart
> Sent: Wednesday, February 10, 1999 11:50 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Re: [analog-help] Large number of corrupt lines warning]
>
>
> On 2/10/99 6:52 PM Mike Avila ([EMAIL PROTECTED]) wrote:
>
> >Lines from good log file:
> >
> >#Software: Microsoft Internet Information Server 4.0
> >#Version: 1.0
> >#Fields: date time c-ip cs-username s-ip cs-method cs-uri-stem
> cs-uri-query
> >sc-status sc-win32-status sc-bytes cs-bytes time-taken cs(User-Agent)
> >cs(Referer)
> >1999-01-01 09:30:47 209.196.138.195 - 209.196.138.195 GET
> >/admin/Start/main.html - 401 5 769 249 0 WebTrends/3.0+(WinNT) -
> >
> >Lines from corrupt log file:
> >
> >1999-02-01 07:43:24 209.196.138.195 - www.troyadventist.org GET
> >/links.htm - 200 0 14169 243 500 WebTrends/3.0+(WinNT) -
>
> In order for Analog to properly auto detect Microsoft W3C logs,
> the first
> line in the log file must be a #Software line and the log must contain a
> #Fields line before any of the log entries. The second example
> is missing
> both lines.
>
> You can work around a missing #Software line by setting the LOGFORMAT to
> MS-EXTENDED, but the #Fields line MUST be present. Since Microsoft IIS
> uses a variable format log file when in W3C mode, Analog needs to know
> which fields are present in the log file, which it gets from the #Fields
> line.
>
>
> On 2/10/99 10:48 PM Jeremy Wadsack ([EMAIL PROTECTED]) wrote:
>
> >#Fields:date time c-ip cs-username cs-method cs-uri-stem cs-uri-query
> >sc-status
> >sc-win32-status sc-bytes cs-bytes time-taken cs-version cs(User-Agent)
> >cs(Cookie)
> >cs(Referer)
> >1998-11-14 21:22:30 207.204.215.200 - GET /index.html - 200 0
> 701 499 591
> >HTTP/1.1
> >Mozilla/4.0+(compatible;+MSIE+4.01;+Windows+NT)
> >DemoID=899301224574;+FLAGLINKBID=899301247137 -
> >
> >In fact if I run analog on a log file with just this line, it
> still comes up
> >corrupt. The data correlate with the field specs so what now?
> Change log file
> >formats? I'd really like to be able to do stats on all this data.
>
> This is the same problem, there is no #Software line and you probably
> have not set the LOGFORMAT to MS-EXTENDED.
>
> Good Luck
> Jason
>
> -----------------
> [EMAIL PROTECTED]
> -----------------
> Dr. Seuss books . . . can be read and enjoyed on several levels. For
> example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
> as a searing indictment of the narrow-minded binary counting system.
> -- Peter van der Linden, Expert C Programming, Deep C Secrets
>
>
> --------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
> --------------------------------------------------------------------
>
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
