edward rikard-bell <[EMAIL PROTECTED]> wrote: >> I've configured the format for analog.cfg: >> (%v: [%d/%M/%y:%h:%n:%j %j] %s - - "%j %r %j" %c %b "%f" "%B") >> >> C: whackmybush.com: [03/Oct/2007:16:18:32 +0100] 66.214.232.81 - - >> "GET /rss.xml HTTP/1.1" 200 19245 "-" "iTunes/7.4.2 (Macintosh; N; >> Intel)" >> C: *
The * is under 2007. You have defind that field as %y (lowercase), which the documenattion says is "year, last two digits". But your logfile has a 4 digit year, which is %Y (uppercase). LOGFORMAT (%v: [%d/%M/%Y:%h:%n:%j %j] %s - - "%j %r %j" %c %b "%f" "%B") should do the job. http://analog.cx/docs/logfmt.html Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
