Max Gut <[EMAIL PROTECTED]> wrote:
> am 10.04.2002 17:26 Uhr schrieb Aengus unter [EMAIL PROTECTED]:
>
>>>>> The string was send to me like this:
>>>>>
>>>>> "%A %h %l %u %t \"%r\" %s %b %{Host}i \"%{Referer}i\" \"%{User-
>>>>> agent}i\" \"%{X-Forwarded-For}i\""
>
> Here are 3 Lines from the Apache Webserver and I will be happy about a
> format suggestion that matches:
>
> 195.252.203.173 - - [03/Mar/2002:23:59:19 +0100] "GET /links.gif
> HTTP/1.1" 200 6412 www.w-h-d.de "http://www.w-h-d.de/men5.html";
> "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" "-"
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
"%B" "%j")
Note that that list field, "X-Forwarded-For" is a bit tricky, because if
it's present, you might actually want to treat it as %S, in which case
you might want to use 3 LOGFORMATS:
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
"%B" "unknown")
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
"%B" "-")
LOGFORMAT (%j %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
"%B" "%S")
Aengus
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/analog-help@lists.isite.net/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
