> I have an issue where the Proxy server I am running (EZPROXY) generates a
> unique logfile format that I can't seem to get Analog 6.0 to recognise.
>
> Some necessary info:
> Ezproxy and Analog (Same server, Fedora 8)
>
> The Ezproxy logfile format is specified in the ezproxy.cfg file,
> which is
> LogSPU spu.log %{ezproxy-spuaccess}i %h %l %u %t
> "%r" %s %b
>
> Some example logs generated by Ezproxy:
>
> local 66.158.45.2 - - [15/Jul/2008:18:57:36 -0600] "HEAD
> http://infoweb.newsbank.com?db=DOBB HTTP/1.1" 301 491
> local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD
> http://infoweb.newsbank.com?db=CTRB HTTP/1.1" 301 491
> local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD
> http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defau
> ltdb=aph HTTP/1.1" 301 585
> proxy 205.188.116.15 - gNDs4AexHJMk3B9 [15/Jul/2008:21:04:33
> -0600] "GET
> http://proxy-ob.dupagels.lib.il.us:18457/login?url=http://infoweb.newsbank
> .com?db=CTRB HTTP/1.1" 200 0
> proxy 205.188.116.205 - gNDs4AexHJMk3B9
> [15/Jul/2008:21:04:33 -0600] "GET http://infoweb.newsbank.com?db=CTRB
> HTTP/1.1" 200 0
> proxy 76.224.8.224 - eJuY424kpSUJqee [16/Jul/2008:11:47:38
> -0600] "GET http://heritagequestonline.com/refurl HTTP/1.1" 200 0
>
>
> I need to determine "local" requests from a library as
> opposed to "proxy" requests, and then be able to group them so libraries
> know how many local verses remote requests are
> made
>
>
> When I enter the above log format in analog.cfg:
>
> LOGFORMAT (%{ezproxy-spuaccess}i %h %l %u %t "%r" %s %b)
>
> I receive the following results when I run analog:
>
> ./analog: analog version 6.0/Unix
> ./analog: Warning C: Bad argument in configuration command: ignoring it:
> LOGFORMAT (%{ezproxy-spuaccess}i %h %l %u %t "%r" %S %b)
> ./analog: ...cont..: (reason: an unknown item code is present)
> (For help on all errors and warnings, see docs/errors.html)
> ./analog: Warning L: Large number of corrupt lines in logfile
> /usr/local/analog-6.0.3/logfile.log: turn debugging on or try different
> LOGFORMAT
> Current logfile format:
> %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b\n
> %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b\n
> %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b\n
> ./analog: Warning R: Turning off empty time reports
> ./analog: Warning R: Turning off empty Request Report
> ./analog: Warning R: Turning off empty Organisation Report
>
> I thought that the above output in the "Current logfile format" might be
> analogs attempt at guessing the logfile format, so I tried all the
> different iterations, but yet I am still receiving the "corrupt lines in
> logfile". I have turned on debugging, but it doesn't seem to give me any
> extra information as to what is going on.
>
> Any help would be appreciated.
>
>
> Brian Clanton
> mailto:bclanton@dupagels.lib.il.us
> Systems Technician
> Dupage Library System
> http://www.dupagels.lib.il.us
> 127 South First Street
> Geneva IL, 60134
> Voice/Voicemail (630) 232-8457 Ext. 210
> Fax: (630) 232 0699
>
> Automation Department direct line:
>
> Voice/Voicemail (630) 232-4674
>
> unique logfile format that I can't seem to get Analog 6.0 to recognise.
>
> Some necessary info:
> Ezproxy and Analog (Same server, Fedora 8)
>
> The Ezproxy logfile format is specified in the ezproxy.cfg file,
> which is
> LogSPU spu.log %{ezproxy-spuaccess}i %h %l %u %t
> "%r" %s %b
>
> Some example logs generated by Ezproxy:
>
> local 66.158.45.2 - - [15/Jul/2008:18:57:36 -0600] "HEAD
> http://infoweb.newsbank.com?db=DOBB HTTP/1.1" 301 491
> local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD
> http://infoweb.newsbank.com?db=CTRB HTTP/1.1" 301 491
> local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD
> http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defau
> ltdb=aph HTTP/1.1" 301 585
> proxy 205.188.116.15 - gNDs4AexHJMk3B9 [15/Jul/2008:21:04:33
> -0600] "GET
> http://proxy-ob.dupagels.lib.il.us:18457/login?url=http://infoweb.newsbank
> .com?db=CTRB HTTP/1.1" 200 0
> proxy 205.188.116.205 - gNDs4AexHJMk3B9
> [15/Jul/2008:21:04:33 -0600] "GET http://infoweb.newsbank.com?db=CTRB
> HTTP/1.1" 200 0
> proxy 76.224.8.224 - eJuY424kpSUJqee [16/Jul/2008:11:47:38
> -0600] "GET http://heritagequestonline.com/refurl HTTP/1.1" 200 0
>
>
> I need to determine "local" requests from a library as
> opposed to "proxy" requests, and then be able to group them so libraries
> know how many local verses remote requests are
> made
>
>
> When I enter the above log format in analog.cfg:
>
> LOGFORMAT (%{ezproxy-spuaccess}i %h %l %u %t "%r" %s %b)
>
> I receive the following results when I run analog:
>
> ./analog: analog version 6.0/Unix
> ./analog: Warning C: Bad argument in configuration command: ignoring it:
> LOGFORMAT (%{ezproxy-spuaccess}i %h %l %u %t "%r" %S %b)
> ./analog: ...cont..: (reason: an unknown item code is present)
> (For help on all errors and warnings, see docs/errors.html)
> ./analog: Warning L: Large number of corrupt lines in logfile
> /usr/local/analog-6.0.3/logfile.log: turn debugging on or try different
> LOGFORMAT
> Current logfile format:
> %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b\n
> %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b\n
> %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b\n
> ./analog: Warning R: Turning off empty time reports
> ./analog: Warning R: Turning off empty Request Report
> ./analog: Warning R: Turning off empty Organisation Report
>
> I thought that the above output in the "Current logfile format" might be
> analogs attempt at guessing the logfile format, so I tried all the
> different iterations, but yet I am still receiving the "corrupt lines in
> logfile". I have turned on debugging, but it doesn't seem to give me any
> extra information as to what is going on.
>
> Any help would be appreciated.
>
>
> Brian Clanton
> mailto:bclanton@dupagels.lib.il.us
> Systems Technician
> Dupage Library System
> http://www.dupagels.lib.il.us
> 127 South First Street
> Geneva IL, 60134
> Voice/Voicemail (630) 232-8457 Ext. 210
> Fax: (630) 232 0699
>
> Automation Department direct line:
>
> Voice/Voicemail (630) 232-4674
>