> Bruno Cantieni <[EMAIL PROTECTED]> (Tuesday, February 03, 2004 9:54 AM):
>
> > Hello,
>
> > I'm trying to generate a report which lists only method POST log entries
for
> > a specific PHP page.
>
> > I have no problem limiting/restricting the report to requests for this
> > single PHP page, however, I can not use a regex such as
> > "^/direcories_here/page_name.php?action=action" in order to only get
> > submitted pages.
> > The PHP pages actually submitted don't result in a log entry with
arguments
> > but rather just the method.
> > How can I filter on the method??
>
> POST method does not include the form arguments in the request, it is
> submitted separately and not logged. This is by design for space
> saving (POST has no size limit) and security (otherwise HTTPS requests
> could expose private information). You will not be able to report on
> these request with log file analysis software.
>
> In addition, Analog neither reads nor processes the method part of the
> log file. So you cannot use *INCLUDE or *EXCLUDE commands to limit
> requests by method. (See http://analog.cx/docs/include.html.)
>
> I can think of three alternate approaches off hand:
>
> 1] Use a custom LOGFORMAT command where the method is explicitly POST
> (rather than %j) to only read log file lines that match a POST
> request. (See http://analog.cx/docs/logfmt.html for details.)
>
> 2] Pre-process the log file with a script (or grep on unix -- you
> could even do this "inline" with the UNCOMPRESS command) so that only
> the POST-method requests for the particular file are given to Analog.
>
> 3] Use some alternate request logging method inside your application
> to store the particular requests you want to track to a special log
> file and process that later with Analog.
>
>
> -- 
>
> Jeremy Wadsack
> Wadsack-Allen Digital Group
>

Thanks for the suggestions.
Never did think of the LOGFORMAT  approach.
Obviously, pre-processing is one answer but this is spread over 50+ weekly
logfiles at 200 MB (uncompressed) each.
I will try the LOGFORMAT option.
Should work.

B.


+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  Digest version: http://lists.isite.net/listgate/analog-help-digest/
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------

Reply via email to