On Saturday, July 31, 2004 1:10 PM [GMT], Harish Narayanan <[EMAIL PROTECTED]> wrote:
> 141.213.74.30 - - [31/May/2004:00:38:20 -0400] "GET /play.css > HTTP/1.1" 304 - actuality.wahgnube.org > "http://actuality.wahgnube.org/" "Mozilla/4.0 (compatible; MSIE 6.0; > Windows NT 5.0)" "-" > > For reference, the logformat I used from the webhost help page is: > "%{Host}i %h %l %u %t \"%r\" %s %b \"%{Referer}i\" \"%{User-agent}i\" > %b" While I've never bothered to learn the Apache syntax, I can tell you that that entry doesn't match the sample lines you posted - you can see that the Apache config file has 2 entries between the request (\"%r\") and the Referrer, whereas your logfile has 3, the 3rd of which is probably a virtual host entry (there are 2 different values in the lines you posted - actuality.wahgnube.org and aggreg8.wahgnube.org). Assuming I can just move the Host Header entry to the correct place, you might try this APACHELOGFORMAT: (%h %l %u %t \"%r\" %s %b %{Host}i \"%{Referer}i\" \"%{User-agent}i\" "-") Alternatively, in Analog syntax, LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b %v "%f" "%B" "-") should do the job. (Note that I have no idea what that last "-" is supposed to be, so I have left it in explicitly. This will help you figure out if it's important, if any lines fail because they do have some data in that field). Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------