From analog-help  Wed Apr 20 20:59:55 2005
From: Jeremy Wadsack <jeremy () 7simplemachines ! com>
Date: Wed, 20 Apr 2005 20:59:55 +0000
To: analog-help
Subject: Re: [analog-help] Help needed
Message-Id: <4266C2CB.1090601 () 7simplemachines ! com>
X-MARC-Message: https://marc.info/?l=analog-help&m=111403118712661

This is combined log format with an extra field at the end (the virtual 
host?). You can see sample LOGFORMAT commands for Combined format in the 
docs at the end of this page: http://analog.cx/docs/logfmt.html.

If I assume that the last field is a virtual host, the following lines 
should work (the first is most important, the others are for really old 
user agents):

LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B" "%v")
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B" "%v")
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%r" %c %b "%f" "%B" "%v")
    



-- 
Jeremy Wadsack
Seven Simple Machines



Transform Landscapes wrote:

>Hi,
>
>Been trying to set this up all day.... Tried just about everything for the
>LOGFORMAT string, and I just keep getting "corrupt lines" warning when I run
>analog on my log files....
>
>Here is a full line from my log file....
>
>24.21.114.43 - - [19/Apr/2005:17:19:57 -0700] "GET /decking.html HTTP/1.1"
>200 7012 "http://www.avdecking.co.uk" "Mozilla/4.0 (compatible; MSIE 6.0;
>Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
>"www.transform-landscapes.com"
>
>Thanks!
>
>  
>

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------