Greetings,
Since there was no info message with my subscription to this list, I
really have two questions...
1. Is there an archive of list messages?
2. How do I analyze Real Server G2 logs?
I get every line in the log file as being corrupt. I've tried several
different logformats but to no avail. Has anyone done this yet and can
show me the proper LOGFORMAT, or show me where I'm going wrong? I'm
including a few lines of the log and the LOGFORMATs I've tried using.
Ooops. Three questions.
3. Can I use a "%j" field specifier to ignore multiple,
white-space-delimited fields? If I use a "%j" field specifier, does
that suck in everything up to the next match? For example, with a line
like this ...
field1 [field2 field3] field4
can I use a format of: %S [%j] %c to ignore field2 and field3? Or
alternatively: %S [%j to ignore everything to the end of the line? It
seems so, from the examples in the docs, but I would like confirmation.
Any help appreciated.
TIA
Paul Baughman
System Administrator
SRT Enterprises
---- G2 Logfile -------
207.49.226.139 - - [03/Feb/1999:19:02:39 +0000] "GET admin/index.html
HTTP/1.0" 200 411 [UNKNOWN] UNKNOWN] [UNKNOWN] 0 0 0 0 0 1
207.49.226.139 - - [03/Feb/1999:19:02:39 +0000] "GET admin/index.html
HTTP/1.0" 200 1650 [UNKNOWN] UNKNOWN] [UNKNOWN] 0 0 0 0 0 2
207.49.226.139 - - [03/Feb/1999:19:02:39 +0000] "GET admin/header.html
HTTP/1.0" 200 4232 [UNKNOWN] UNKNOWN] [UNKNOWN] 0 0 0 0 0 3
....
208.236.85.84 - - [12/Apr/1999:09:51:29 -0500] "GET bgea/hod.ra
PNAH/10" 200 4318072 [WinNT_4.0_6.0.3.143_play32_PN01_en-US_686]
[8c66b981-98e3-11d1-e279-09b6efd91f2c] [UNKNOWN] 2478864 1242 1053 0 0
6661
151.198.140.20 - - [12/Apr/1999:10:01:49 -0500] "GET
bgea/bgea_033099.ra PNA/10" 200 791744
[Win95_4.10_5.0.0.97_play32_RN5A_EN_586]
[c3166b41-eb5c-11d1-f65e-f7824e304681] [Stat1: 2834
0 5 0 0 dnet][Stat2: 15963
15939 1652 350 826 57 52
0 0 0 1760 dnet] 3276901 1558 397 56 4 6667
[
---- LOGFORMATs --------
LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] "%j %r %j" %j %b %j\n)
LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] "%j %r %j" %j %b [UNKNOWN]
[UNKNOWN] [UNKNOWN] %j %j %j %j %j %j\n)
LOGFORMAT (%S - %j - [%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b [%j] [%j] [%j]
%j)
LOGFORMAT (%S - %j - [%d/%M/%Y:%h:%n:%j] "%j%j %r %j" %c %b [%j] [%j]
[%j] %j %j %j %j %j %j)
LOGFORMAT (%S - %j - [%d/%M/%Y:%h:%n:%j] "%j%j %r %j" %c %b [%j %j %j %j
%j %j %j] [%j %j %j %j %j %j %j] [%j %j %j %j %j %j %j] %j)
LOGFORMAT (%S - %j - [%d/%M/%Y:%h:%n:%j] "%j%j %r %j" %c %b [%j %j %j %j
%j %j %j] [%j %j %j %j %j %j %j] [%j %j %j %j %j %j %j] %j %j %j %j %j
%j)
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
