Roger <ro...@roger-beaumont.co.uk> wrote:
> Dan Hough wrote:
>> I am trying to follow the CIS Security Configuration Benchmark for
>> Apache Web Server 2.2.0. I have a new apache install using RedHat EL
>> 5.3. The httpd version is 2.2.3. The configuration benchmark
>> recommends adding a parameter to the combined log file for Accept.
>> The line I am using is:
>>
>> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i\"
>> \"%{User-Agent}i\"" combined
>>
>> I am unable to find a parameter in the Analog documentation that
>> matches. I tried using this line in my analog.cfg, following the
>> instruction in the web documentation:
>>
>> APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Accept}i\"
>> \"%{Referer}i \" \"%{User-Agent}i\")
>
> Just a guess, but the quotes inside the quotes in the 1st, LogFormat,
> statement are 'quoted' (represented as \") because otherwise they'd be
> treated as delimiters instead of characters. In the APACHELOGFORMAT
> line, they are still quoted, though there are no 'outside' quote
> marks, so I'd guess they are redundant. This line uses brackets to
> delimit the text not quote marks.
>
> It may be worth trying that line without the backslashes:
>
> APACHELOGFORMAT (%h %l %u %t "%r" %>s %b "%{Accept}i" "%{Referer}i"
> "%{User-Agent}i")
Analog is able to parse out the escape "quotes", and the APACHELOGFORMAT line
works with the sample line that Dan posted, with or without the \'s.
I just copied the sample line into a file, added the APACHELOGFORMAT entry and
a LOGFILE entry to my analog.cfg, and generated a report.
Whatever is causing the empty report, it's not the format.
Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
