On Wed, 20 Oct 1999, Stephen Turner wrote:

ST>>> I'm having a problem getting my LOGFORMAT right. Any help would be
ST>>> appreciated!
ST>>> 
ST>>> Here is a typical log line (the server is WN):
ST>>> 
ST>>> # proxy-443.public.paix.webtv.net - - [16/Oct/1999:01:02:00 -0400] "GET
ST>>> /store/Html/Images/header.jpg HTTP/1.0" 200 22550 <(10831/1) Sent file:
ST>>> /store/Html/Images/header.jpg> <Mozilla/3.0 WebTV/1.2 (compatible; MSIE
ST>>> 2.0)> <http://www.idkent.com/store/frontpage.html> <> <0>
ST>>> 
ST>>> Here's what I have been trying to use, but Analog pukes on it.
ST>>> 
ST>>> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b <%j> <%B>
ST>>> <%f> <%j> <%v>\n)
ST>>> 
ST>>
ST>>This LOGFORMAT analyses that line fine on my machine (assuming that the line
ST>>didn't originally start with a hash). What specifically does "puking" mean?

/usr/local/bin/analog.new: Warning M: Logfile /var/log/wn.log.001 contains
  lines with no virtual hosts, which are being filtered
  (For help on all errors and warnings, see docs/errors.html)
/usr/local/bin/analog.new: Warning L: Large number of corrupt lines in
logfile
  /var/log/wn.log.001: try different LOGFORMAT
    Current logfile format:
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b\n
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b\n
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b\n



-= Jim =-

----------------------------------------------------------------
Jim's Linux-Operated Underground Bomb Shelter
(Specializing in Hot Peppers and Mushrooms, and wayward kids)
----------------------------------------------------------------

Tagline for Wednesday, October 20, 1999 at 08:40 AM:

He who always plows a straight furrow is in a rut.

----------------------------------------------------------------
This Linux System has been up 460 hours  

My web page: http://www.idkent.com
----------------------------------------------------------------

------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------

Reply via email to