Dan Hough wrote:
I am trying to follow the CIS Security Configuration Benchmark for
Apache Web Server 2.2.0. I have a new apache install using RedHat EL
5.3. The httpd version is 2.2.3. The configuration benchmark
recommends adding a parameter to the combined log file for Accept. The
line I am using is:
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i\"
\"%{User-Agent}i\"" combined
I am unable to find a parameter in the Analog documentation that
matches. I tried using this line in my analog.cfg, following the
instruction in the web documentation:
APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i
\" \"%{User-Agent}i\")
Just a guess, but the quotes inside the quotes in the 1st, LogFormat,
statement are 'quoted' (represented as \") because otherwise they'd be
treated as delimiters instead of characters. In the APACHELOGFORMAT
line, they are still quoted, though there are no 'outside' quote marks,
so I'd guess they are redundant. This line uses brackets to delimit the
text not quote marks.
It may be worth trying that line without the backslashes:
APACHELOGFORMAT (%h %l %u %t "%r" %>s %b "%{Accept}i" "%{Referer}i"
"%{User-Agent}i")
I'm guessing. I don't properly understand the format of either line,
but I do know what those backslashes are for - and they really don't
seem appropriate in the APACHELOGFORMAT line.
This is just something to try until someone who really does understand
supplies the right answer...
Roger
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
