[prev in list] [next in list] [prev in thread] [next in thread]
List: analog-help
Subject: RE: [analog-help] Helix Server log format
From: "Brereton, Stephen" <stephen.brereton () york ! gov ! uk>
Date: 2006-03-20 9:46:14
Message-ID: 9FE814B04878D248A44E0F9BEB39CC4001A3C53D () exchange ! york ! gov ! uk
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Even though I've never heard of the 'Helix' server, its good to know that
these custom log strings do work. I've had some fun myself with sorting
ancient formats out, but never with any luck.
-----Original Message-----
From: Chris Hampartsoumian [mailto:chris@clubguide.com]
Sent: 19 March 2006 23:09
To: analog-help@lists.meer.net
Subject: [analog-help] Helix Server log format
I am replying to an ancient post I saw archived on the web site;
http://lists.meer.net/pipermail/analog-help/2005-August/018703.html
<http://lists.meer.net/pipermail/analog-help/2005-August/018703.html>
Back on Fri Aug 19 2005,
Aye Mon posted:
Does anyone has any idea how to work with Helix Server log format? Below is
a
sample log from the server. I tried using different log formats, and it's
not
working.
138.220.124.82 - - [30/Sep/2004:12:06:45 -0400] "GET
bspan/wbi/626/1251/poverty_impact_MACRO_May-06-AM.rm RTSPT/1.0" 200 170990
[WinNT_5.0_0.0.0.0_play32_EP80_en-US_686_axembed]
[b525af11-12fa-11d9-e033-6d502592b936] [Stat1: 128 0
0
0 0 32_Kbps_Voice][Stat2: 32115 81499 0
0
0 0 0 0 0 1 20
32_Kbps_Voice] 136654670 7599 7 0 0 37
Thanks,
Aye Mon
I couldn't find a reply out on the net, and I was trying to process my helix
server log with analog as well. I ended up writing a log string for the
Helix Server Log which goes like this:
LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b [%j] [%j] [%j] %j %j
%j %j %j %j)
You can get the details on what that lot means form the Analog Home Page,
but the key which kept me stumped for a while is that the Helix Server
enteres two spaces after the date enclosed by []'s and just before the GET.
Details can be found at: http://www.soumian.com/resources.php
<http://www.soumian.com/resources.php>
Thought I'd post it in case it ever goes up as a reply to the original post.
- Sorry if I've used the list in totally the wrong way, I've just suddenly
decied I should at least try and post an answer instead of only ever
searching for them
regards
Chris H
* * * * * * * * * * * *
This communication is from City of York Council.
The information contained within, and in any attachment(s), is confidential
and legally privileged. It is for the exclusive use of the intended
recipient(s). If you are not the intended recipient(s), please note that any
form of distribution, copying or use of this communication, or the
information within, is strictly prohibited and may be unlawful. Equally, you
must not disclose all, or part, of its contents to any other person.
If you have received this communication in error, please return it
immediately to the sender, then delete and destroy any copies of it.
City of York Council disclaims any liability for action taken in reliance on
the content of this communication.
[Attachment #5 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2802" name=GENERATOR></HEAD>
<BODY
style="WORD-WRAP: break-word; khtml-nbsp-mode: space; khtml-line-break: \
after-white-space"> <DIV><SPAN class=171364209-20032006><FONT face=Arial \
color=#0000ff size=2>Even though I've never heard of the 'Helix' server, its good to \
know that these custom log strings do work. I've had some fun myself with sorting \
ancient formats out, but never with any luck.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Chris Hampartsoumian
[mailto:chris@clubguide.com]<BR><B>Sent:</B> 19 March 2006 23:09<BR><B>To:</B>
analog-help@lists.meer.net<BR><B>Subject:</B> [analog-help] Helix Server log
format<BR><BR></FONT></DIV>I am replying to an ancient post I saw archived on
the web site;
<DIV><A
href="http://lists.meer.net/pipermail/analog-help/2005-August/018703.html">http://lists.meer.net/pipermail/analog-help/2005-August/018703.html</A></DIV>
<DIV><BR class=khtml-block-placeholder></DIV>
<DIV>Back on Fri Aug 19 2005,
<DIV><BR class=khtml-block-placeholder></DIV>
<DIV>Aye Mon posted:</DIV>
<DIV><BR class=khtml-block-placeholder></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span style="FONT-SIZE: 13px">Does anyone has
any idea how to work with Helix Server log format? Below is
a</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span style="FONT-SIZE: 13px">sample log from
the server. I tried using different log formats, and it's
not</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">working.</SPAN></FONT></DIV>
<DIV style="MIN-HEIGHT: 16px; MARGIN: 0px; FONT: 13px Courier"><BR></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span style="FONT-SIZE: 13px">138.220.124.82 - -
[30/Sep/2004:12:06:45 -0400]</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">"GET</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">bspan/wbi/626/1251/poverty_impact_MACRO_May-06-AM.rm
RTSPT/1.0" 200 170990</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">[WinNT_5.0_0.0.0.0_play32_EP80_en-US_686_axembed]</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">[b525af11-12fa-11d9-e033-6d502592b936] [Stat1:
</SPAN></FONT><FONT class=Apple-style-span face=Courier size=3><SPAN
class=Apple-style-span style="FONT-SIZE: 13px">
</SPAN></FONT><FONT class=Apple-style-span face=Courier size=3><SPAN
class=Apple-style-span style="FONT-SIZE: 13px">128</SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0 32_Kbps_Voice][Stat2: </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">32115</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">81499</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">0</SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">1 </SPAN></FONT><FONT class=Apple-style-span
face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px"> </SPAN></FONT><FONT
class=Apple-style-span face=Courier size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">20</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span style="FONT-SIZE: 13px">32_Kbps_Voice]
136654670 7599 7 0 0 37</SPAN></FONT></DIV>
<DIV style="MIN-HEIGHT: 16px; MARGIN: 0px; FONT: 13px Courier"><BR></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span
style="FONT-SIZE: 13px">Thanks,</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span style="FONT-SIZE: 13px">Aye
Mon</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span style="FONT-SIZE: 13px"><BR
class=khtml-block-placeholder></SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Courier
size=3><SPAN class=Apple-style-span style="FONT-SIZE: 13px"><BR
class=khtml-block-placeholder></SPAN></FONT></DIV>
<DIV style="MARGIN: 0px">I couldn't find a reply out on the net, and I was
trying to process my helix server log with analog as well. I ended up writing
a log string for the Helix Server Log which goes like this:</DIV>
<DIV style="MARGIN: 0px"><BR class=khtml-block-placeholder></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Times size=4><SPAN
class=Apple-style-span style="FONT-SIZE: 16px">LOGFORMAT (%S - -
[%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b [%j] [%j] [%j] %j %j %j %j %j
%j)</SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Times size=4><SPAN
class=Apple-style-span style="FONT-SIZE: 16px"><BR
class=khtml-block-placeholder></SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Times size=4><SPAN
class=Apple-style-span style="FONT-SIZE: 16px">You can get the details on what
that lot means form the Analog Home Page, but the key which kept me stumped
for a while is that the Helix Server enteres two spaces after the date
enclosed by []'s and just before the GET.</SPAN></FONT><FONT
class=Apple-style-span face=Times size=4><SPAN class=Apple-style-span
style="FONT-SIZE: 16px"></SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Times size=4><SPAN
class=Apple-style-span style="FONT-SIZE: 16px"><BR
class=khtml-block-placeholder></SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><FONT class=Apple-style-span face=Times size=4><SPAN
class=Apple-style-span style="FONT-SIZE: 16px">Details can be found
at: <FONT class=Apple-style-span face=Helvetica size=3><SPAN
class=Apple-style-span style="FONT-SIZE: 12px"><A
href="http://www.soumian.com/resources.php">http://www.soumian.com/resources.php</A></SPAN></FONT></SPAN></FONT></DIV>
<DIV style="MARGIN: 0px"><BR class=khtml-block-placeholder></DIV>
<DIV style="MARGIN: 0px">Thought I'd post it in case it ever goes up as a
reply to the original post. - Sorry if I've used the list in totally the wrong
way, I've just suddenly decied I should at least try and post an answer
instead of only ever searching for them</DIV>
<DIV style="MARGIN: 0px"><BR class=khtml-block-placeholder></DIV>
<DIV style="MARGIN: 0px">regards</DIV>
<DIV style="MARGIN: 0px"><BR class=khtml-block-placeholder></DIV>
<DIV style="MARGIN: 0px">Chris H</DIV></DIV></BLOCKQUOTE></BODY></HTML>
<BR>
<P><FONT SIZE=2 FACE="Arial">* * * * * * * * * * * *</FONT></P>
<P><FONT SIZE=2 FACE="Arial">This communication is from City of York Council. \
</FONT></P> <BR>
<P><FONT SIZE=2 FACE="Arial">The information contained within, and in any \
attachment(s), is confidential and legally privileged. It is for the exclusive use of \
the intended recipient(s). If you are not the intended recipient(s), please note that \
any form of distribution, copying or use of this communication, or the information \
within, is strictly prohibited and may be unlawful. Equally, you must not disclose \
all, or part, of its contents to any other person.</FONT></P> <BR>
<P><FONT SIZE=2 FACE="Arial">If you have received this communication in error, please \
return it immediately to the sender, then delete and destroy any copies of \
it.</FONT></P> <BR>
<P><FONT SIZE=2 FACE="Arial">City of York Council disclaims any liability for action \
taken in reliance on the content of this communication.</FONT></P>
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic