On 2/24/99 12:24 PM Glen W. Forister ([EMAIL PROTECTED]) wrote:
>That may be clear to Chris, but I'm trying to figure this out and it
>doesn't compute. Why the six format lines when there is only one format to
>that single line?? Also, in my case (IIS) I have to get the browser and
>referrer in the format string. Does that mean a format line for each the
>browser and the referrer when they occur in each line of the output???
>There should be one line to define the format of an output line to my
>thinking.
Microsoft IIS logs should be handled automaticaly, you shouldn't need any
special LOGFORMAT commands.
There are two different LOGFORMAT commands: DEFAULTLOGFORMAT and
LOGFORMAT. DEFAULTLOGFORMAT is used for input files where no LOGFORMAT
was specified. This happens on the Macintosh for drag and drop logs and
on Unix when a log is specified on the command line. LOGFORMAT is for
logs specified in the configuration file.
Some log formats have variable formats, so several different LOGFORMAT
lines are needed, one for each possible format of the log line. Any log
format the records the full original request line, as Demon Internet
does, will require multipule format lines because request lines can occur
in three different formats. Apache normaly does this, as does Common Log
Format, but WebSTAR and Microsoft IIS do not normaly have that.
If you are having trouble with Microsoft IIS logs make sure you have the
lattest version of Analog, ie. 3.1.1. There were several small bug fixes
for Microsoft format logs in the last few releases.
If you are still having trouble, could you post the first several lines
from one of your logfiles to the list?
Jason
-----------------
[EMAIL PROTECTED]
-----------------
Dr. Seuss books . . . can be read and enjoyed on several levels. For
example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
as a searing indictment of the narrow-minded binary counting system.
-- Peter van der Linden, Expert C Programming, Deep C Secrets
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
