Has anyone any experience of processing 1and1 logfiles through analog? They seem to use an unusual format that analog doesn't recognise. The record layout seems to be:
Requestor IP Username Date/time "GET requested URL inc HTTP version" HTTP response Bytes Domain to which the request refers <-- This seems to be something particular to 1and1 and is unquoted "Referrer" "User agent" "-" <-- No idea what this is meant to be! So for example: 124.115.0.145 - - [07/Sep/2009:00:24:08 +0200] "GET / HTTP/1.1" 200 17616 www.mydomain.com "http://www.mydomain.com/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" "-" I'm presuming a LOGFORMAT would fix it but no luck. I tried: LOGFORMAT (%s - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b %j %f %B %j) Which when matched up with the log record wold read as: %s - Requestor IP - %u - Username [%d/%M/%Y:%h:%n:%j %j] - Date/time %j - GET %r - requested URL %j - HTTP version %c - HTTP response %b - Bytes %j - Domain to which the request refers %f - Referrer %B - Browser/user agent %j - "-" Strangely, despite the LOGFORMAT command <errors.txt> reports: analog: Warning F: Can't auto-detect format of logfile Logs\20090907.log: ignoring it Any ideas? Many thanks.../Iain
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
