Nick Stephens <[EMAIL PROTECTED]> wrote: ... > access_log excerpt: > ------------------------- > 123.321.123.321 - - [08/Apr/2004:00:00:33 -0700] "POST /webpage?t=10 > HTTP/1.1" 200 67263 "http://whatever/webiste"; "Mozilla/4.0 > (compatible; MSIE 6.0; Windows NT 5.0)" "Cookie=bWghsdHQ6; > JSESSIONID=cI7sdfhssddJd0f; chkcookie=1034633091167" > > analog.cfg attempt: > ------------------------- > LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b "%j" "%B" > "%j %j") > > This gives me MOST of the results, but it still complains about a lot > of corrupted lines (several thousand) that render my results > completely inaccurate.. I've tried making it just "%j" in that last > segment of the LOGFORMAT, but unfortunately that results in about an > 1/8th of the log being read instead. > > I'm pretty certain that the "%j %j" portion is whats killin me, but I > can't figure out how to get it to take whatever is in that last set of > quotations, be it a single item, 3 times, or just a hyphen.
LOGFORMAT (%S .... "%B" %j) should do the trick, if you just want to ignore everything after the Agent string. (I've left out the rest of the logformat to prevent wrapping by my mail program. You can also change the date part to be just [%d/%M/%Y:%h:%n:%j] because :%j] treats everything between the last : and the next ] as junk). Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
