Mailing List Archive

Duane Nelson wrote:

> <snip>
> Log Sample:
> portup205.portup.com | - | [04/Feb/1999:10:18:06 -0500] | "GET
> /cards/astronaut.jpg HTTP/1.1" | 304 | - | - |
> http://nazarene.loss2gain.com/cards/feb2-96001.html | "Mozilla/4.0
> (compatible; MSIE 5.0b2; Windows 95; SPEED)"
>
> Log Breakdown:
> 1. Host
> 2. User
> 3. Date and Time
> 4. Request header by client
> 5. Status Code
> 6. Data Transfer
> 7. Domain name which was accessed
> 8. Referer
> 9. Browser and OS
>
> My Lastest Try (Failed):
> LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j] | "%j / %r %j" |
> %c | %b | %v | %f | "%B")
>
> <snip>
> --------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to analog-help-request@lists.isite.net
> with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
> --------------------------------------------------------------------

Duane,

My guess, just from looking at it, is analog is interperting the rest of
the time zone as an invalid field. I think you've also got an extra ' /'
before the request field. Try this and see if it works:

LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j %j] | "%j %r %j" |
%c | %b | %v | %f | "%B")

Jeremy Wadsack
The Flagstaff Link
http://www.flagstaff.net/


--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request@lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

Jeremy Wadsack helped out with:
> My guess, just from looking at it, is analog is interperting the rest of
> the time zone as an invalid field. I think you've also got an extra ' /'
> before the request field. Try this and see if it works:
>
> LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j %j] | "%j %r %j" |
> %c | %b | %v | %f | "%B")

Thank you. It worked. I noted my errors and bow my head to you
in gratefulness.

Duane Nelson
President, Loss2gaiN Designs
COMPLETE WEB SERVICES: http://www.loss2gain.com
SOUP WITH A MISSION: http://nazarene.loss2gain.com/soulfulbowlful/
DESIGN SAMPLES: http://www.nmdnaz.org/char/
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request@lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

On Sat, 20 Feb 1999, Jeremy Wadsack wrote:
>
> Duane,
>
> My guess, just from looking at it, is analog is interperting the rest of
> the time zone as an invalid field. I think you've also got an extra ' /'
> before the request field. Try this and see if it works:
>
> LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j %j] | "%j %r %j" |
> %c | %b | %v | %f | "%B")
>

I believe the timezone was OK, but the other change is needed.

Stephen Turner



--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request@lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

Hi everyone; sorry for my english and my bored question, but recently i
change my format in a Webstar Server log and i'm going crazy to
configure it correctly.

Any idea?

I've tried this:

LOGFORMAT (%m/%d/%y %w %h:%n:%j %w %S:%j %j %w %r %w "%j" %w %c %w %b %w %j
%w "%B" %w "%u" %w %f)

And this is a sample of log lines:

!!LOG_FORMAT DATE TIME C-IP CS-METHOD CS-URI-STEM CS(HOST) CS-STATUS
BYTES_SENT BYTES CS(USER-AGENT) CS(COOKIE) REFERER
02/01/99 10:22:42 155.54.5.144:80 GET /index.html
"databases.iese.edu" 200 5092 5092 "Mozilla/2.0 (Win95; I;
16bit)" ""
http://www.iese.edu/search/search.idq?CiScope=%2F&CiMaxRecordsPerPage=10&Tem
plateName=query&CiSort=rank%5Bd%5D&HTMLQueryForm=search.html&CiRestrictionDa
ta=gastronomia&Submit=Search
02/01/99 10:22:43 155.54.5.144:80 GET /images/hpph1.jpeg
"databases.iese.edu" 200 8762 8762 "Mozilla/2.0 (Win95; I;
16bit)" "" http://databases.iese.edu/index.html
02/01/99 10:22:43 155.54.5.144:80 GET /images/agescudo.gif
"databases.iese.edu" 200 1684 1684 "Mozilla/2.0 (Win95; I;
16bit)" "" http://databases.iese.edu/index.html
02/01/99 10:23:21 155.54.5.144:80 GET /sectores.qry
"databases.iese.edu" - 4877 4877 "Mozilla/2.0 (Win95; I;
16bit)" "" http://databases.iese.edu/index.html
02/01/99 10:23:21 155.54.5.144:80 GET /graphics/fons.gif
"databases.iese.edu" 200 5841 5841 "Mozilla/2.0 (Win95; I;
16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:21 155.54.5.144:80 GET /graphics/blank.gif
"databases.iese.edu" 200 56 56 "Mozilla/2.0 (Win95; I;
16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:21 155.54.5.144:80 GET /graphics/home.gif
"databases.iese.edu" 200 1510 1510 "Mozilla/2.0 (Win95; I;
16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:22 155.54.5.144:80 GET
/graphics/burdeos.gif "databases.iese.edu" 200 54 54
"Mozilla/2.0 (Win95; I; 16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:22 155.54.5.144:80 GET
/graphics/botonera96.gif "databases.iese.edu" 200 792 792
"Mozilla/2.0 (Win95; I; 16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:24:17 62.81.72.214:80 GET /boc.qry
"databases.iese.edu" - 17915 17915 "Mozilla/2.0 (compatible;
MSIE 3.01; Windows 95)" "Tango_UserReference=6ED1D04E290AAF0C"

Thanks in advance!

------------------------------------------
Manel Carrasco (tel. 932 53 42 00)
Centro Inform?tica (mailto:manel@iese.edu)
IESE, Universidad de Navarra, Spain
------------------------------------------
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request@lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

Hi Steve,

Thanks so much.. I'll try them.

I already tried Angus's LOGFORMAT lines and here's the result:

http://www.columbia.edu/~jf2412/report2/

http://www.columbia.edu/~jf2412/report3/

Thanks again!

Joshua




On 5/3/08 3:51 AM, "Stephen Turner" <analog-author@lists.meer.net> wrote:

> I admit to not having tried it, but I think you need two LOGFORMAT
> lines to match the two different formats, and they should look
> something like this:
>
> LOGFORMAT '%S - - [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b "(ref %f)"
> "(client %B)" "vhost %v"'
> LOGFORMAT '%S - - [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b "(ref %f)"
> "(client %B)"'
>
> They have to go in that order. I put the arguments in single quotes
> because they already contain double quotes and parentheses within
> them.

--
Joshua S. Freeman
Director- CUIT Interactive Services
o: 212.854.2083 | m: 347.392.2560
Skype/YIM: karmester | Skype-In: 914.613.3132


+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Joshua S. Freeman <jf2412@columbia.edu> wrote:
> Hi Steve,
>
> Thanks so much.. I'll try them.
>
> I already tried Angus's LOGFORMAT lines and here's the result:
>
> http://www.columbia.edu/~jf2412/report2/
>
> http://www.columbia.edu/~jf2412/report3/

I forgot about the closing parentheses, so the referrer and Browser strings using my LOGFORMATs have a trailing ). Not really a problem for the Browser Summary, but if you click on any of the Referrers in your Referrer report, you should get an error response.

Stephens version tells Analog that the closing parenthesis around these fields aren't actually part of the Browser and Referrer strings.

Aengus

+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------