I'm having trouble when the logfile is passed in on the
command-line, instead of in the config file. I have been doing this with
an older version of Analog, without any problems. But now:
In my config (www.daily.cfg), the first line is :
LOGFORMAT (%S %u %j [%d/%M/%Y:%h:%n:%j] "%j" %c %b "%f" "%B" "%r")
I call:
[liza@ds /usr/local/src/analog-4.13]$ ./analog -G +gwww.daily.cfg
/usage/logs/www/access_log.new_format >/home/liza/public_html/tmp/new.html
And i get the following errors (and an empty report):
./analog: analog version 4.13/Unix
./analog: Warning D: LOGFORMAT in configuration file www.daily.cfg with no
subsequent LOGFILE
(For help on all errors and warnings, see docs/errors.html)
./analog: Warning F: Can't auto-detect format of logfile
/www/ds.clickthebutton.com/usage/logs/www/access_log.new_format:
ignoring it
./analog: Warning R: Turning off empty time reports
./analog: Warning R: Turning off empty Request Report
.
.
.
But if I put
LOGFILE /usage/logs/www/access_log.new_format
into the config, it works fine. I can't keep it in there, however,
because our log files are date stamped, e.g. access_log.20001128
Has anyone else seen this problem? I don't think I have a dumb syntax
error anywhere...
I was also wondering if there is any way to give HOSTEXCLUDE a range of
IPs?
thanks---
On Wed, 15 Nov 2000, Jeremy Wadsack wrote:
> Date: Wed, 15 Nov 2000 10:39:32 -0700
> From: Jeremy Wadsack <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: [analog-help] Virtual Hosts Report on multiple sub-domains in a
single log file(fwd)
>
>
>
> liza ezbiansky wrote:
>
> > Hi-- I'm running analog4.13 on Linux
> >
> > I want to change my apache access_log to include the virtual hostname,
> > because we have multiple sub-domains that I want to log into a single log
> > file.
> >
> > When I tried to set up analog to read from a sample log with the virtual
> > host, it treats all lines as corrupt.
> > (i do not get any error messages on the command line- just an empty report
> > with "Successful requests: 0 \n Corrupt logfile lines: 6" )
> >
> > I did the following in my analog config file:
> >
> > LOGFORMAT (%S %u %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B"
> > %v)
> > LOGFILE /usr/local/src/analog-4.13/tmp2.log %v
> >
> > (I also tried "LOGFILE /usr/local/src/analog-4.13/tmp2.log %v.domain.com",
> > and other formats, cause it is unclear to me what this actually does)
> >
> > An entry in tmp2.log looks like:
> >
> > 63.14.193.62 -741136 - [08/Nov/2000:23:59:49 -0500] "GET /index.html
> > HTTP/1.1" 200 15803 "-" "Mozilla/4.0 (compatible; MSIE 5.5; )"
> > subdomain1.domain.com
> >
> > When I remove the %v from LOGFORMAT, LOGFILE, and take the hostname out of
> > my log entries, the reports come out ok (but obviously with an empty
> > virtual host report).
> >
> > Can figure out what I'm doing wrong. Any thoughts?
>
> This all looks right to me. You could try DEBUG C which will tell you exactly
> what lines and where in the line the "corruption" occurs.
>
>
> Jeremy Wadsack
> Wadsack-Allen Digital Group
>
>
> ------------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe" in the main BODY OF THE MESSAGE.
> List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
> ------------------------------------------------------------------------
>
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------
