I am trying to follow the CIS Security Configuration Benchmark for
Apache Web Server 2.2.0. I have a new apache install using RedHat EL
5.3. The httpd version is 2.2.3. The configuration benchmark
recommends adding a parameter to the combined log file for Accept. The
line I am using is:
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i\"
\"%{User-Agent}i\"" combined
I am unable to find a parameter in the Analog documentation that
matches. I tried using this line in my analog.cfg, following the
instruction in the web documentation:
APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i
\" \"%{User-Agent}i\")
but that results in a Turning off empty time reports message and no
lines are read.
Here is a sample of the log file:
obshough.bio.ou.edu - - [07/Jul/2009:15:52:14 -0500] "GET /opportun.html
HTTP/1.
1" 200 7541 "text/html,application/xhtml
+xml,application/xml;q=0.9,*/*;q=0.8" "h
ttp://pincel.ou.edu/" "Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.9.0.11) Geck
o/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11"
Is analog able to read log files in this format? Can it analyze the
accept parameter? What is the proper LOGFORMAT statement?
Any help would be appreciated.
Dan
--
Dan Hough email:dhough@ou.edu
Oklahoma Biological Survey
Norman, OK 73019
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
Apache Web Server 2.2.0. I have a new apache install using RedHat EL
5.3. The httpd version is 2.2.3. The configuration benchmark
recommends adding a parameter to the combined log file for Accept. The
line I am using is:
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i\"
\"%{User-Agent}i\"" combined
I am unable to find a parameter in the Analog documentation that
matches. I tried using this line in my analog.cfg, following the
instruction in the web documentation:
APACHELOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Accept}i\" \"%{Referer}i
\" \"%{User-Agent}i\")
but that results in a Turning off empty time reports message and no
lines are read.
Here is a sample of the log file:
obshough.bio.ou.edu - - [07/Jul/2009:15:52:14 -0500] "GET /opportun.html
HTTP/1.
1" 200 7541 "text/html,application/xhtml
+xml,application/xml;q=0.9,*/*;q=0.8" "h
ttp://pincel.ou.edu/" "Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.9.0.11) Geck
o/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11"
Is analog able to read log files in this format? Can it analyze the
accept parameter? What is the proper LOGFORMAT statement?
Any help would be appreciated.
Dan
--
Dan Hough email:dhough@ou.edu
Oklahoma Biological Survey
Norman, OK 73019
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------