Hi! I have some problem configurating the LOGFORMAT command to fit a non-standard logfile. The logfile is the result of the activity of users on a Windows 2000 web server application and is written like this:
127.0.0.1 ma-g6xev2rrwijf Autore [27/Feb/2002:16:38:24 ] "101 <Inserted Document |Intranet / Archivio Clienti / Cliente Test/Progetto Test/Test 2| >" 127.0.0.1 ma-g6xev2rrwijf administrator [27/Feb/2002:22:50:33 ] "202 <Modified Folder |Intranet / News / Forum/Appunti di viaggio| >" I think that the meaning of the lines is: Client-IP virtual-domain username [date:time ] “internal-code <meaning-of-internal-code |file-requested| >” The best configuration I tried is: LOGFORMAT (%s %v %u [%d/%M/%Y:%h:%n:%j] "%C <%j %r>"\n) 1) I’d like to have statistics using the codes made by the program but I don’t know how to make Analog read them (%C didn’t work at all with that!!) Note that the internal-code are numbers between 101 and 999, and than I can’t use %c. 2) If is impossible to make Analog recognize the internal-codes as %C, can it use them as character strings and make statistics using that strings? 3) Can Analog recognize the character | as it does with [ or “ or ( ? The result I’d like to have is something like an audit trail by meaning-of-internal-codes (or internal-codes themselves) ordered by users. For example: Code 10x: Inserted Object (note that 101 means Inserted Document, 102 Inserted Folder, 103 Inserted Link): Autore: # 12 Administrator: # 4 Etc… Code 20x: (201 Modified Document, 202 Modified Folder, 203 Modified Link) Autore: # 19 Administrator: # 2 Etc… NOTE: Is possible to do what I’m trying to?!?! Thank You, Mauro Andriano