Thanks for your help, unfortunatley there is no description in the top line of my logfiles. You're right that there seems to be a couple of extra fields for now apparent reason, my ISP, SHAW in Canada, won't supply any more info about their servers, apart from their Apache.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aengus Sent: July 23, 2004 11:29 AM To: [EMAIL PROTECTED] Subject: Re: [analog-help] APACHE Logformat, so many errors On Friday, July 23, 2004 7:05 PM [GMT], System Administrator <[EMAIL PROTECTED]> wrote: > Here are a few line from my logfile; > 65.54.164.40 - - [08/jul/2004:03:07:39 -0600] "get /stanns/index.html > http/1.0" 404 211 404 211 - - 196 168 295 208 0 "" "msnbot/0.11 > (+http://search.msn.com/msnbot.htm)" > 66.194.6.83 - - [08/jul/2004:05:58:28 -0600] "get / http/1.1" 200 3549 > - - - > - 108 272 - - 0 "" "mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; > q312467)" 24.14.151.202 - - [08/jul/2004:13:29:04 -0600] "get / > http/1.1" 200 3549 200 3549 - - 437 246 551 272 0 "" "mozilla/4.0 > (compatible; msie 6.0; windows nt > 5.1; .net clr 1.0.3705; .net clr 1.1.4322; alexa toolbar)" You said it's in Netscape Extended Logfile format - does the first line of the logfile not have a description of the logformat something like this: format=%Ses->>client.ip% - %Req->vars.auth-user% [%SYSDATE%] "%Req->>reqpb.clf-request%" %Req->srvhdrs.clf-status% %Req->>srvhdrs.content-length% %duration% I have no idea what the 9 different fields between the URL and the referrer might be - the first is obviously the status code, and the 2nd is probablt the size, and they are repreated in the 1st and 3rd example you give, but not in the 2nd example. Try this: LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b %j "%f" "%B") Aengus > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Aengus > Sent: July 23, 2004 11:01 AM > To: [EMAIL PROTECTED] > Subject: Re: [analog-help] APACHE Logformat, so many errors > > > On Friday, July 23, 2004 6:15 PM [GMT], > System Administrator <[EMAIL PROTECTED]> wrote: > >> C:\Program Files\analog\analog 5.32>analog >> analog: analog version 5.32/Win32 >> analog: Warning L: Large number of corrupt lines in logfile >> C:\websites\copy_new\logs\access.07: turn debugging on or try >> different LOGFORMAT >> (For help on all errors and warnings, see docs/errors.html) >> Current logfile format: >> %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B"\n >> %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B"\n >> %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b "%f" "%B"\n > > Post 2 or 3 lines from your logfile. > >> If I use debugging; >> >> C:\Program Files\analog\analog 5.32>analog debug on >> analog: analog version 5.32/Win32 >> analog: Warning F: Failed to open logfile debug: ignoring it > > You just told Analog to analyze a logfile called "debug". > > Try > C:\Program Files\analog\analog 5.32>analog +C"debug on" > > or add DEBUG ON to your analog.cfg file. > > Aengus > +----------------------------------------------------------------------- > +- >> TO UNSUBSCRIBE from this list: >> http://lists.isite.net/listgate/analog-help/unsubscribe.html >> >> Digest version: http://lists.isite.net/listgate/analog-help-digest/ >> Usenet version: news://news.gmane.org/gmane.comp.web.analog.general >> List archives: http://www.analog.cx/docs/mailing.html#listarchives > +----------------------------------------------------------------------- > +- > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004 > > > +----------------------------------------------------------------------- - >> TO UNSUBSCRIBE from this list: >> http://lists.isite.net/listgate/analog-help/unsubscribe.html >> >> Digest version: http://lists.isite.net/listgate/analog-help-digest/ >> Usenet version: news://news.gmane.org/gmane.comp.web.analog.general >> List archives: http://www.analog.cx/docs/mailing.html#listarchives > +----------------------------------------------------------------------- - +----------------------------------------------------------------------- +- | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +----------------------------------------------------------------------- +- --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004 +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
