On Wednesday, July 12, 2006 8:59 AM [EDT], analog-help at talent-aid.org <[EMAIL PROTECTED]> wrote:
Hi, I have an apache http access log with lines like this: 000.000.000.000 - - [10/Jul/2006:00:20:37 +0200] "GET /xxxx?yyyy=zzzz&locale=en_xx&DB=DB1&parm=bla HTTP/1.1" 302 - "http://referrer.com/page.html"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 000.000.000.000 - - [10/Jul/2006:00:20:37 +0200] "GET /xxxx?yyyy=zzzz&locale=fr_xx&DB=DB1&parm=bla HTTP/1.1" 302 - "http://referrer.com/page.html"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 000.000.000.000 - - [10/Jul/2006:00:20:37 +0200] "GET /xxxx?yyyy=zzzz&locale=en_xx&DB=DB2&parm=bla HTTP/1.1" 302 - "http://referrer.com/page.html"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 000.000.000.000 - - [10/Jul/2006:00:20:37 +0200] "GET /xxxx?yyyy=zzzz&locale=fr_xx&DB=DB2&parm=bla HTTP/1.1" 302 - "http://referrer.com/page.html"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" I would like to match these and put them in an alias like FILEALIAS REGEXP:\/xxxx\?.*en_.*DB1.*302.* DB1_Redirected_EN FILEALIAS REGEXP:\/xxxx\?.*fr_.*DB1.*302.* DB2_Redirected_FR FILEALIAS REGEXP:\/xxxx\?.*en_.*DB2.*302.* DB1_Redirected_EN FILEALIAS REGEXP:\/xxxx\?.*fr_.*DB2.*302.* DB2_Redirected_FR Is that possible?
The 302 isn't part of the Filename, so a FILEALIAS isn't going to see it unless you created a custom LOGFORMAT that included the status code. But that would complicate matters (because Analog wouldn't be able to tell that these were redirects any more, and you'd get double counting).
Are you using the Redirection report? If the script in question always results in a redirect, then a FILEALIAS or a REQALIAS for the script should give you what you need in the Redirection report.
Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
