I got some help from the log provider and came up with a logformat that seems to work, almost perfect.... Analyzing the exact same data with proper 3 letter months once with no logformat specified (auto detect) and once with this logformat
LOGFORMAT (%s %v - [%d/%M%j/%Y:%h:%n:%j %j] "%j %r %j" %c %b %f %B) I get slightly different numbers for successful request, failed request, distinct host served and so on. I do not see any errors in reading the logs or any coruupt lines like normally show up in the gzip window or are counted at the start of the report Also the reports provided are identical except the search word report is missing when I specify this logformat. I definitely would like to have the ability to use all the features to understand my visitors. CAn you help tune up this logformat? Thanks in advance..... Jim Campbell -----Original Message----- From: Clean Air Solutions [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 04, 2002 11:45 PM To: [EMAIL PROTECTED] Subject: RE: [analog-help] Month spelled out in date I have given it a good try but have been unable to get my own log format to work. The month of may works with auto detect and provides all kinds of great info about search words used and such. Will a logformat line still provide all the same info when proper? I have been unable to get any of the logformats in the readme.doc to work on May or any of the logs that have 3 letter months which should work without the %M%j in the date. A few lines from a auto detectable log file: 216.35.116.112 www.cleanairsolutions.net - [02/May/2002:03:54:03 -0600] "GET / HTTP/1.0" 200 16432 "-" "Mozilla/5.0 (Slurp/cat; [EMAIL PROTECTED]; http://www.inktomi.com/slurp.html)" 152.163.189.103 www.cleanairsolutions.net - [02/May/2002:03:57:01 -0600] "GET / HTTP/1.0" 200 16432 "-" "Mozilla/4.0 (compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)" 65.214.36.159 www.cleanairsolutions.net - [02/May/2002:08:21:28 -0600] "GET / HTTP/1.0" 200 16432 "-" "Mozilla/2.0 (compatible; Ask Jeeves)" 65.214.36.159 www.cleanairsolutions.net - [02/May/2002:08:31:20 -0600] "GET /products.htm HTTP/1.0" 200 15618 "-" "Mozilla/2.0 (compatible; Ask Jeeves)" 65.214.36.159 www.cleanairsolutions.net - [02/May/2002:08:38:26 -0600] "GET /page5.htm HTTP/1.0" 200 9357 "-" "Mozilla/2.0 (compatible; Ask Jeeves)" A little help with the logformat line that would also handle spelled months please. On the logs that are working this program is great. We haven't even started with all the cool features that will hopefully let us understand our visitors. All of the recent good data is in the bogus format. Thanks -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Stephen Turner Sent: Sunday, September 01, 2002 12:44 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [analog-help] Month spelled out in date On Fri, 30 Aug 2002, Stephen Turner wrote: > On Thu, 29 Aug 2002, Clean Air Solutions wrote: > > > Months ago my log provider began spelling out the month in the date. The > > month of May works... because it has 3 letters. What can I do to get analog > > to accept these logs. They come zipped and we use gzip. > > > > Analog won't read them, unless you edit the source code. You can pre-process > the logs with another tiny program first, of course. And tell your service > provider to use a standard log format. > I realised later that this isn't true. Analog will read them, if you define your own LOGFORMAT. For example, if you have the date 01/September/2002 you can use the format %d/%M%j/%Y (The %j tells analog to ignore the end of the month name). -- Stephen Turner, Cambridge, UK http://homepage.ntlworld.com/adelie/stephen/ "This is Henman's 8th Wimbledon, and he's only lost 7 matches." BBC, 2/Jul/01 +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/analog-help@lists.isite.net/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------ +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/analog-help@lists.isite.net/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
