Max Gut <[EMAIL PROTECTED]> wrote:
> I tried 3 different lines now in the analog.conf, 2 lines to cover
> the old logformat and one line that you proposed for the added "{X-
> Forwarded-For}". There are still warnings about corrupt lines but now
> Analog recognizes the different types in one operation. Is it o.k. to
> have a configuration like this? ->
>
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b %v
> "%f" "%B")
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b %v "%f" "%B")
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
> "%B" "%j")
Yes. In fact, if you have some lines that include the HTTP bit in the
request string and some that don't, you'll need 4 lines. (The first and
last line are basically the same, except that I just used a space
instead of %w). You just replicate your existing LOGFORMAT lines and add
"%j" for the last field.
Aengus
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/analog-help@lists.isite.net/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
