[prev in list] [next in list] [prev in thread] [next in thread] 

List:       analog-help
Subject:    Re: [analog-help] Need help with apachelogformat command
From:       "Aengus" <analog07 () eircom ! net>
Date:       2007-01-05 12:51:03
Message-ID: 005801c730c8$2942bae0$6400a8c0 () xppro
[Download RAW message or body]

On Friday, January 05, 2007 3:38 AM [EDT],
Eric Delore <ericdelore@comcast.net> wrote:

> Dear analog-help@lists.meer.net,
>
> My server says my apache logs are in the following format:
>
> #The raw log files are in Apache format:
> #CustomLog /var/log/httpd/access_log "%{Host}i %h %l %u %t \"%r\" %s
> %b %v \"%{Referer}i\" \"%{User-agent}i\"
>
> When I issue the following command in my analog.cfg file, I get an
> error complaining that one item appears twice:
>
> APACHELOGFORMAT (%{Host}i %h %l %u %t \"%r\" %s %b %v \"%{Referer}i\"
> \"%{User-agent}i\)
>
> Is this log format parsable by Analog?

Change the second occurrence of the item that is repeated twice (%h) to %j.

Analog makes the fairly reasonable assumption that if it thinks that a field 
has been repeated twice, it is probably misinterpreting the logformat, and 
that you should give it better information before it proceeds, as it would 
have no way of choosing the "correct" field if some entries have different 
data in those fields.

APACHELOGFORMAT (%{Host}i %j %l %u %t \"%r\" %s %b %v \"%{Referer}i\" 
\"%{User-agent}i\)

Aengus

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
[prev in list] [next in list] [prev in thread] [next in thread]