Mailing List Archive

undefined log field
We are analyzing our internal logs from using the Google Search Appliance.
These logs include a variable for the number of search results returned to
the client. Rather than defining this as %j (junk) in the LOGFORMAT, is
there some way to capture this field with Analog?

Thanks,

Terry Maluk
tmaluk@usgs.gov
Re: undefined log field [ In reply to ]
On 5/27/2008 4:48 PM, Terry L Maluk wrote:
>
> We are analyzing our internal logs from using the Google Search
> Appliance. These logs include a variable for the number of search
> results returned to the client. Rather than defining this as %j (junk)
> in the LOGFORMAT, is there some way to capture this field with Analog?

You can use any field that isn't otherwise being used. The User field
(%u) is probably the most commonly "re-used" field in these
circumstances. Just put %u in that location in your LOGFORMAT, and turn
the User Report on (USER ON), and you should see how many times user "1"
turned up, and how many times user "2", etc.

Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
Re: undefined log field [ In reply to ]
Perfect. Thank you!

Terry Maluk
tmaluk@usgs.gov



Aengus <analog07@eircom.net>
Sent by: analog-help-bounces@lists.meer.net
05/27/2008 09:02 PM
Please respond to
Support for analog web log analyzer <analog-help@lists.meer.net>


To
Support for analog web log analyzer <analog-help@lists.meer.net>
cc

Subject
Re: [analog-help] undefined log field






On 5/27/2008 4:48 PM, Terry L Maluk wrote:
>
> We are analyzing our internal logs from using the Google Search
> Appliance. These logs include a variable for the number of search
> results returned to the client. Rather than defining this as %j (junk)
> in the LOGFORMAT, is there some way to capture this field with Analog?

You can use any field that isn't otherwise being used. The User field
(%u) is probably the most commonly "re-used" field in these
circumstances. Just put %u in that location in your LOGFORMAT, and turn
the User Report on (USER ON), and you should see how many times user "1"
turned up, and how many times user "2", etc.

Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------