Pathak, Geeta ([EMAIL PROTECTED]; Tuesday, June 24, 2003 2:13 PM): > I have to filter my log file for those lines in the request report which > have a particular string in the argument list. > For example: > 15.39.53.21 server.com user1 [22/May/2003:19:02:28 +0500] "GET > /QuickPlace/jerk/Main.nsf/h_43F8B74C161D54EF85256C1D00655258/$new/?EditDocum > ent&Form=h_PageUI&h_PageType;h_Revision,h_SetParentUnid HTTP/1.1" 200 78667
> I have to filter lines which have "h_Revision" in the argument list. My > logformat is > LOGFORMAT (%S %j %u[%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b) > I have tried > FILEEXCLUDE * > FILEINCLUDE *h_Revision* The FILEEXCLUDE * is implied by the FILEINCLUDE statement if there are no previous FILEINCLUDE/FILEEXCLUDE statements. This should work to include only those lines in *all* reports. Try adding SETTINGS ON to have Analog tell you about inclusion/exclusions if you are not sure if it's applying the command. > REQEXCLUDE > REQINCLUDE *h_Revision* This will affect the Request Report only. (maybe your intention?) However, if you don't have ARGSINCLUDE enabled for those requests, then the 'h_revision' will never show up in the Request Report lines and therefore no lines will be shown. Try adding ARGSINCLUDE /QuickPlace/jerk/Main.nsf or something more general: ARGSINCLUDE *.nsf or ARGSINCLUDE * > And I have set the REQARGSFLOOR -5000r also, but nothing seems to be > working. Also check REQFLOOR. You can use '1r' in any FLOOR command to show all records. -- Jeremy Wadsack Wadsack-Allen Digital Group +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
