Buddy Lumpkin wrote:
>LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b "%f" "%B" %j)
>LOGFILE ./logs/combined*
>
>with this LOGFORMAT I get tons of C: entries with debug on and several
>unwanted lines:
>
>C: 210.255.7.182 - cassandra [14/Jun/2000:23:46:19 +0900] "GET
>/Fortune/data//money.gif HTTP/1.1" 200 266
>"http://www.gabugabu.com/Fortune/data/entry.jsp" "Mozilla/4.0 (compatible;
>MSIE 4.01; Windows 98)" www.gabugabu.com
>C: *
This tells you that the error occurred in the "user" field, because the
LOGFORMAT specified - and the log entry had cassandra.
>S: Unwanted lines: 133304
>S: Corrupt lines: 112
This tells you that you only had 112 corrupt lines - all the others were
recognized, but excluded.
>LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b "%f" "%B" %j)
>LOGFILE ./logs/combined*
>
>With this, all lines are unwanted:
>
>S: Unwanted lines: 133416
>S: Corrupt lines: 0
So there's nothing wrong with your LOGFORMAT.
Do you have any INCLUDE or EXCLUDE statements in your config file?
Aengus
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
