[analog-help] Need help to retrieve (and correct) all reports from this log (Maybe I need the LOGFORMAT)

2008-12-01 Thread Leung, Michael
Dear Analog experts, The following is an example of the log along with the description: format=%Ses-client.ip% - %Req-vars.auth-user% [%SYSDATE%] %Req-reqpb.clf-request% %Req-srvhdrs.clf-status% %Req-srvhdrs.content-length% %Req-headers.referer% %Req-headers.user-agent%

Re: [analog-help] Need help to retrieve (and correct) all reports fromthis log (Maybe I need the LOGFORMAT)

2008-12-01 Thread Aengus
Leung, Michael [EMAIL PROTECTED] wrote: Dear Analog experts, The following is an example of the log along with the description: format=%Ses-client.ip% - %Req-vars.auth-user% [%SYSDATE%] %Req-reqpb.clf-request% %Req-srvhdrs.clf-status% %Req-srvhdrs.content-length% %Req-headers.referer%

RE: [analog-help] Need help to retrieve (and correct) all reports (need help on LOGFORMAT)

2008-12-01 Thread Leung, Michael
Aengus, What didn't look right? Analog won't convert IP addresses into Hostnames automatically, so the Domain Report will be based purely on IP numbers, unless you set up DNS lookups. The reports also have certain floors, and they don't show information that falls below those floors, so

Re: [analog-help] Need help to retrieve (and correct) all reports(need help on LOGFORMAT)

2008-12-01 Thread Aengus
Leung, Michael [EMAIL PROTECTED] wrote: Aengus, The below is what we see for the Domain Report, but it is not what we are expecting. Listing domains, sorted by the amount of traffic. reqs %bytes domain 655193 100% [unresolved numerical addresses] Even it is entirely based on IP

RE: [analog-help] Need help to retrieve (and correct) reports (need help on LOGFORMAT)

2008-12-01 Thread Leung, Michael
Aengus, When I used your suggestion: LOGFORMAT (%S - %j [%d/%M/%Y:%h:%n:%j] %j %r %j %c %b %f %A %j) It is working fine. At least, analog doesn't complaint anymore. From what I could tell, either of Domain Report or Organization Report still is not giving out meaningful results.