[analog-help] Trouble locating duplicate fields

2007-09-24 Thread Hunter John
I'm trying to analyze Apache logs with the following format: APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{SSL_PROTOCOL}x:%{SSL_CIPHER}x:%{SSL_SESSION_ID}x\" %D %T \"%{Cookie}i\" %v) Analog's debug tells me that one item occurs twice in the translated format o

Re: [analog-help] Trouble locating duplicate fields

2007-09-24 Thread Aengus
On Monday, September 24, 2007 8:14 AM [EDT], Hunter John <[EMAIL PROTECTED]> wrote: I'm trying to analyze Apache logs with the following format: APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{SSL_PROTOCOL}x:%{SSL_CIPHER}x:%{SSL_SESSION_ID}x\" %D %T \"%{Cookie}

RE: [analog-help] Trouble locating duplicate fields

2007-09-24 Thread Hunter John
is that despite changing the %t to a %j immediately following the %D, I'm getting a '0' in the result instead of a '-'! I thought Analog was supposed to skip %j fields? Regards, John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf O

Re: [analog-help] Trouble locating duplicate fields

2007-09-24 Thread Aengus
On Monday, September 24, 2007 9:06 AM [EDT], Hunter John <[EMAIL PROTECTED]> wrote: Many thanks Aengus. I hadn't noticed the asterisk. Analog appears to be falling over at the %b 'bytes sent' field, although I'm still none the wiser. Here's the first line in the log, together with the first c

RE: [analog-help] Trouble locating duplicate fields

2007-09-24 Thread Hunter John
g web log analyzer Subject: Re: [analog-help] Trouble locating duplicate fields On Monday, September 24, 2007 9:06 AM [EDT], Hunter John <[EMAIL PROTECTED]> wrote: > Many thanks Aengus. I hadn't noticed the asterisk. Analog appears to > be falling over at the %b 'bytes sent