Mailing List Archive by Gossamer Threads http://www.gossamer-threads.com/lists/analog/help/ en-us (c) Gossamer Threads Inc. All rights reserved. 08 Nov 2009 20:13:22 -0800 120 75 23 http://www.gossamer-threads.com/lists/analog/help/ http://www.gossamer-threads.com/images/lists/rss_logo.jpg Troy Simpson <tdsimpson@gmail.com> wrote: > FILEINCLUDE /*?*035E592F-FA2A-267B-5AF64F16D156031F > REQINCLUDE /* # This line was important. But I a 04 Nov 2009 14:49:57 -0800 http://www.gossamer-threads.com/lists/analog/help/21504 Troy Simpson <tdsimpson@gmail.com> wrote: > Thanks for all the help so far. > Where can I find Analog's order of process. > I'm trying to understand t 04 Nov 2009 14:26:30 -0800 http://www.gossamer-threads.com/lists/analog/help/21503 Possible Solution: I don't understand why yet, but this appears to get me closer to what I want. ALL OFF ALLCHART OFF REQUEST ON # Enable the Reque 04 Nov 2009 14:02:37 -0800 http://www.gossamer-threads.com/lists/analog/help/21502 Thanks for all the help so far. Where can I find Analog's order of process. I'm trying to understand this in order to process URL parameters/querystri 04 Nov 2009 10:43:47 -0800 http://www.gossamer-threads.com/lists/analog/help/21501 Sorry if this is not 100% analog centric. But I guess anyone in this list is familar with the issue: I recently resurrected a site which did not do a 04 Nov 2009 07:43:19 -0800 http://www.gossamer-threads.com/lists/analog/help/21500 On 11/3/2009 7:38 PM, Troy Simpson wrote: > The logs are from an IIS Windows server, but I'm running Analog on a > RedHat Linux Server. I had the dir 03 Nov 2009 20:35:56 -0800 http://www.gossamer-threads.com/lists/analog/help/21499 http://www.google.com/search?hl=en&site=&q=site%3Alists.meer.net+analog-help&btnG=Search Aengus +---------------------------------------------------- 03 Nov 2009 20:32:57 -0800 http://www.gossamer-threads.com/lists/analog/help/21498 On 11/3/2009 7:46 PM, Troy Simpson wrote: > Does analog have a step through process so that I can see what lines > match to what directive? > Similar 03 Nov 2009 20:31:36 -0800 http://www.gossamer-threads.com/lists/analog/help/21497 Hello, I am getting a failed to open when the file exists and is very large about 7GB. Rinaldo 03 Nov 2009 17:47:19 -0800 http://www.gossamer-threads.com/lists/analog/help/21496 Thanks, -- Troy Simpson +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists 03 Nov 2009 17:32:45 -0800 http://www.gossamer-threads.com/lists/analog/help/21495 Does analog have a step through process so that I can see what lines match to what directive? Similar to stepping through a program line by line and w 03 Nov 2009 16:46:14 -0800 http://www.gossamer-threads.com/lists/analog/help/21494 The logs are from an IIS Windows server, but I'm running Analog on a RedHat Linux Server. I had the directive case set to insensitive. That was count 03 Nov 2009 16:38:10 -0800 http://www.gossamer-threads.com/lists/analog/help/21493 Troy Simpson <tdsimpson@gmail.com> wrote: > Thanks for the response. Please believe me, I have read the manual > several time over. The practical ex 03 Nov 2009 16:16:45 -0800 http://www.gossamer-threads.com/lists/analog/help/21492 Thanks for the response. Please believe me, I have read the manual several time over. The practical experience is what is killing me. So, let me se 03 Nov 2009 15:35:23 -0800 http://www.gossamer-threads.com/lists/analog/help/21491 Troy Simpson <tdsimpson@gmail.com> wrote: > I am using a content management system (called farcry) to manage and > display web pages to the public. T 03 Nov 2009 14:21:30 -0800 http://www.gossamer-threads.com/lists/analog/help/21490 Troy Simpson wrote: > I am using a content management system (called farcry) to manage and > display web pages to the public. The URL includes an obj 03 Nov 2009 14:12:05 -0800 http://www.gossamer-threads.com/lists/analog/help/21489 I am using a content management system (called farcry) to manage and display web pages to the public. The URL includes an objectID parameter for each 03 Nov 2009 13:59:08 -0800 http://www.gossamer-threads.com/lists/analog/help/21488 Iain Hunneybell <iain@ipmarketing.co.uk> wrote: >> Well I've cure one issue but found another... >> >> By placing my LOGFORMAT ahead of the LOGFILE d 02 Nov 2009 09:56:55 -0800 http://www.gossamer-threads.com/lists/analog/help/21487 LOGFORMAT (or APACHELOGFORMAT) must precede LOGFILE. It defines the log file format used for subsequest LOGFILE commands. See http://analog.cx/docs/lo 02 Nov 2009 08:56:15 -0800 http://www.gossamer-threads.com/lists/analog/help/21486 Don't use LOGFORMAT, rather APACHELOGFORMAT APACHELOGFORMAT (%h %l %u %t \"%r\" %s %b %{Host}i \"%{Referer}i\" \"%{User-agent}i\" "%j") works just 02 Nov 2009 08:23:05 -0800 http://www.gossamer-threads.com/lists/analog/help/21485 Well I've cure one issue but found another... By placing my LOGFORMAT ahead of the LOGFILE directive I've produced a report, but the issues I have ar 02 Nov 2009 07:53:41 -0800 http://www.gossamer-threads.com/lists/analog/help/21484 Has anyone any experience of processing 1and1 logfiles through analog? They seem to use an unusual format that analog doesn't recognise. The record la 02 Nov 2009 07:16:41 -0800 http://www.gossamer-threads.com/lists/analog/help/21483 It might be silly but can you check the permissions of the file & the user Cheers, Anil Reddy M P Please don't print this e-mail unless you really 27 Oct 2009 23:59:44 -0800 http://www.gossamer-threads.com/lists/analog/help/21482 Depending on whether you built Analog as a 32-bit or 64-bit binary and depending on how your OS handles large files, there may be a 4GB file limit. Bu 27 Oct 2009 09:12:38 -0800 http://www.gossamer-threads.com/lists/analog/help/21481 Hello, I just started to use analog. I was making good progress with a small extract of my large log file and I ran into the following issue. 27 Oct 2009 05:11:27 -0800 http://www.gossamer-threads.com/lists/analog/help/21480 Linda Burnside <linda@phoenixpromotions.com> wrote: >> I have a coldfusion website. Is it possible to create a report >> which will show me details o 16 Oct 2009 13:45:23 -0800 http://www.gossamer-threads.com/lists/analog/help/21479 I have a coldfusion website. Is it possible to create a report which will show me details on the get/request information submit? For example, I want 16 Oct 2009 09:28:31 -0800 http://www.gossamer-threads.com/lists/analog/help/21478 Hi All, I have run analog6.0 in Solaris 5.8 it doesn't generate report but throws a dump. Output from analog ./analog: analog version 6.0/Unix . 16 Oct 2009 01:43:54 -0800 http://www.gossamer-threads.com/lists/analog/help/21477 Troy Simpson <tdsimpson@gmail.com> wrote: > I need to change the example a little bit. Here is the example: > > I have a website called www.mydivisi 06 Oct 2009 10:10:15 -0800 http://www.gossamer-threads.com/lists/analog/help/21476 The first will match any hosts that end in that pattern. The latter will match any hosts that contain that pattern. So example.mydomain.com matches b 06 Oct 2009 09:57:34 -0800 http://www.gossamer-threads.com/lists/analog/help/21475 What is the difference between the following two commands? HOSTINCLUDE *.mydomain.com vs HOSTINCLUDE *.mydomain.com* What does the extra * at the 06 Oct 2009 09:42:25 -0800 http://www.gossamer-threads.com/lists/analog/help/21474 I need to change the example a little bit. Here is the example: I have a website called www.mydivision.abc.com. I want to know if the request are co 06 Oct 2009 08:15:25 -0800 http://www.gossamer-threads.com/lists/analog/help/21473 On 10/6/2009 10:20 AM, Troy Simpson wrote: > I need to create a report that breaks up the request into 3 domain areas? > > 1. abc.com > 2. xyz.com > 06 Oct 2009 07:31:47 -0800 http://www.gossamer-threads.com/lists/analog/help/21472 I need to create a report that breaks up the request into 3 domain areas? 1. abc.com 2. xyz.com 3. all other domains? Can this be done with just one 06 Oct 2009 07:20:52 -0800 http://www.gossamer-threads.com/lists/analog/help/21471 This mailing list is for the Analog web log file analyzer product. It doesn't pertain to analog devices at all. You probably are best off looking for 05 Oct 2009 09:06:59 -0800 http://www.gossamer-threads.com/lists/analog/help/21470 On 10/4/2009 7:34 PM, Scott Haneda wrote: > I am only familiar with Summary, and as I said, wanted to get away from > it. Not because it is doing a 04 Oct 2009 20:52:41 -0800 http://www.gossamer-threads.com/lists/analog/help/21469 Thanks! I think I need t just jump in and see how it works. Your pointing me to the form base demand method is good. That may come in handy as t 04 Oct 2009 16:34:24 -0800 http://www.gossamer-threads.com/lists/analog/help/21468 Can any one telkl me any thing about a police scanner? when  every thing went to digital ,within 2 weeks my scanner stoped talking,  just squelch, It 04 Oct 2009 16:15:59 -0800 http://www.gossamer-threads.com/lists/analog/help/21467 On 10/4/2009 4:47 PM, Scott Haneda wrote: >>> Every Apache server we have logs all hits to one log, which is rolled >>> nightly. Summary used built i 04 Oct 2009 15:15:23 -0800 http://www.gossamer-threads.com/lists/analog/help/21466 >> Every Apache server we have logs all hits to one log, which is rolled >> nightly. Summary used built in ftp to pull down only the new log >> files 04 Oct 2009 13:47:06 -0800 http://www.gossamer-threads.com/lists/analog/help/21465 Scott Haneda <talklists@newgeo.com> wrote: > Hello, I am looking at Analog. I am a current summary.net user. The > pay for an update to get features 02 Oct 2009 14:28:42 -0800 http://www.gossamer-threads.com/lists/analog/help/21464 Hello, I am looking at Analog. I am a current summary.net user. The pay for an update to get features I am not going to need, but mostly need ne 02 Oct 2009 14:05:41 -0800 http://www.gossamer-threads.com/lists/analog/help/21463 OK. I did not know that. I am a novice at Analog. Thanks, Aengus. d -----Original Message----- From: analog-help-bounces@lists.meer.net [mailto:ana 02 Oct 2009 13:26:17 -0800 http://www.gossamer-threads.com/lists/analog/help/21462 Zourarakis, Demetrio (COT) <Demetrio.Zourarakis@ky.gov> wrote: > Thanks. Aengus. > It would have created 1012 reports... > I concatenated the logfiles 02 Oct 2009 13:20:43 -0800 http://www.gossamer-threads.com/lists/analog/help/21461 Thanks. Aengus. It would have created 1012 reports... I concatenated the logfiles using MS DOS command line into one BIG logfile... Thanks. Demetrio 02 Oct 2009 13:08:31 -0800 http://www.gossamer-threads.com/lists/analog/help/21460 Zourarakis, Demetrio (COT) <Demetrio.Zourarakis@ky.gov> wrote: > Hi, > > I am doing "after the fact" reporting and have a bunch of daily log > files 02 Oct 2009 12:58:13 -0800 http://www.gossamer-threads.com/lists/analog/help/21459 Hi, I am doing "after the fact" reporting and have a bunch of daily log files dating back 4 years... Is there a way to batch the analog execution se 01 Oct 2009 17:57:31 -0800 http://www.gossamer-threads.com/lists/analog/help/21458 I found the fix for this problem. The fix is: Add OUTPUT HTML to your analog.cfg file, so that anlgform.pl doesn't produce XHTML output. The proble 21 Sep 2009 10:19:39 -0800 http://www.gossamer-threads.com/lists/analog/help/21457 Hi, Analog version is: analog-6.0.3 OS verison: Red Hat Enterprise Linux AS release 4 (Nahant Update 8) Kernel 2.6.9-89 21 Sep 2009 09:29:21 -0800 http://www.gossamer-threads.com/lists/analog/help/21456 Hi Aengus, Very much appreciated for your support inputs.I have resolved the issue. Regards -A On Wed, Sep 9, 2009 at 6:55 PM, Aengus <analog07@eirco 09 Sep 2009 09:21:59 -0800 http://www.gossamer-threads.com/lists/analog/help/21455 On 9/9/2009 7:54 AM, Arnab Ganguly wrote: > Hi All, > In the analog report, we do get one field as "Corrupt logfile lines". > What exactly is this ? 09 Sep 2009 06:25:58 -0800 http://www.gossamer-threads.com/lists/analog/help/21454 Hi All, In the analog report, we do get one field as "Corrupt logfile lines". What exactly is this ? If you browse through the access log we don't se 09 Sep 2009 04:54:40 -0800 http://www.gossamer-threads.com/lists/analog/help/21453 Hi, I want to add a report to analog which will itemize the log dates+locations(dns)+pages visited. Is this possible, and how would it be achieved ? 28 Aug 2009 10:14:39 -0800 http://www.gossamer-threads.com/lists/analog/help/21452 Hello, I wanted to analyse logfiles. I'm using Analog 6.0 with Windows XP and IIS 6.0. The Problem is, that my report shows no charts, only this: Su 19 Aug 2009 04:33:38 -0800 http://www.gossamer-threads.com/lists/analog/help/21451 Christoph Kukulies <kuku@kukulies.org> wrote: > Aengus schrieb: >> On 8/12/2009 10:47 AM, Christoph Kukulies wrote: >> >> Can you post 3 or 4 lines f 12 Aug 2009 13:08:35 -0800 http://www.gossamer-threads.com/lists/analog/help/21450 Aengus schrieb: > On 8/12/2009 10:47 AM, Christoph Kukulies wrote: > >> I introduced this setting (REQFLOOR 1r) now in my config file, I also >> incl 12 Aug 2009 11:32:02 -0800 http://www.gossamer-threads.com/lists/analog/help/21449 Christoph Kukulies <kuku@...> writes: > I introduced this setting (REQFLOOR 1r) now in my config file, I also > included > FILEINCLUDE *.pdf > > St 12 Aug 2009 09:00:17 -0800 http://www.gossamer-threads.com/lists/analog/help/21448 On 8/12/2009 10:47 AM, Christoph Kukulies wrote: > I introduced this setting (REQFLOOR 1r) now in my config file, I also > included > FILEINCLUDE *. 12 Aug 2009 08:28:43 -0800 http://www.gossamer-threads.com/lists/analog/help/21447 Jeremy Wadsack schrieb: > ... > However, I'm not sure that answers your original question. Analog's > reports will show the top number of results ba 12 Aug 2009 07:47:25 -0800 http://www.gossamer-threads.com/lists/analog/help/21446 Paul Simpkin wrote: > Could anyone help me to use Analog with my shoutcast servers? http://lists.meer.net/pipermail/analog-help/2001-August/009722.htm 29 Jul 2009 07:57:23 -0800 http://www.gossamer-threads.com/lists/analog/help/21445 Hi, Could anyone help me to use Analog with my shoutcast servers? Thanks Paul Simpkin +-------------------------------------------------------- 29 Jul 2009 07:45:14 -0800 http://www.gossamer-threads.com/lists/analog/help/21444 Hi Jeremy, Thanks for your reply. :) Looking below at what is appearing in the logs should I add this line to analog.cfg; REXEXCLUDE *ohid* I hav 28 Jul 2009 10:13:16 -0800 http://www.gossamer-threads.com/lists/analog/help/21443 You can remove a request from all reports (including referrer reports with FILEEXCLUDE. To just hide it in the referrer reports use REFEXCLUDE. See h 27 Jul 2009 18:22:56 -0800 http://www.gossamer-threads.com/lists/analog/help/21442 Hi there, Starting on the 25th July we've had several lines appearing in the server access logs and I've been looking through analog help to see how 27 Jul 2009 07:08:59 -0800 http://www.gossamer-threads.com/lists/analog/help/21441 Your exclude statements need to match the request. If index.htm is in your root you'll want at least this: FILEEXCLUDE /index.htm However, if there 24 Jul 2009 10:04:01 -0800 http://www.gossamer-threads.com/lists/analog/help/21440 Our marketing people are interested in how often certain .PDF documents accessed (downloaded) but depending on the hit statistics these do not appear 24 Jul 2009 09:52:10 -0800 http://www.gossamer-threads.com/lists/analog/help/21439 Klaus Johannes Rusch schrieb: > Christoph Kukulies wrote: >> I couldn't get from the link you gave me, though, in the first place, >> how this would 23 Jul 2009 06:47:34 -0800 http://www.gossamer-threads.com/lists/analog/help/21438 Christoph Kukulies wrote: > I couldn't get from the link you gave me, though, in the first place, > how this would lead me to a > means to preprocess 23 Jul 2009 05:53:50 -0800 http://www.gossamer-threads.com/lists/analog/help/21437 Klaus Johannes Rusch schrieb: > Christoph Kukulies wrote: >> I would like to confine the statitics to only consider page visits >> within a certain d 23 Jul 2009 02:48:41 -0800 http://www.gossamer-threads.com/lists/analog/help/21436 Christoph Kukulies wrote: > I would like to confine the statitics to only consider page visits > within a certain daily time window, e.g. 7 am to 7 p 23 Jul 2009 02:10:23 -0800 http://www.gossamer-threads.com/lists/analog/help/21435 I would like to confine the statitics to only consider page visits within a certain daily time window, e.g. 7 am to 7 pm. Is this possible with a FR 23 Jul 2009 01:20:09 -0800 http://www.gossamer-threads.com/lists/analog/help/21434 With big thanks and much respect to John Harman and to Aengus especially, I have made changes to the original tree.c so that Analog now notes both Win 21 Jul 2009 18:12:10 -0800 http://www.gossamer-threads.com/lists/analog/help/21433 Barak Kalai <Barak.Kalai@surepayroll.com> wrote: > I would like pick multiple log files in windows. The file location is > drive_letter:\directory\*st 20 Jul 2009 14:40:37 -0800 http://www.gossamer-threads.com/lists/analog/help/21432 I would like pick multiple log files in windows. The file location is drive_letter:\directory\*static_name.zip -Barak barak.kalai@surepayroll.com (84 20 Jul 2009 14:18:32 -0800 http://www.gossamer-threads.com/lists/analog/help/21431 Dave Sergeant <dave@davesergeant.com> wrote: > On 20 Jul 2009 at 12:58, Aengus wrote: > >> If "real" Safari browsers are identified as 5.something, a 20 Jul 2009 11:30:17 -0800 http://www.gossamer-threads.com/lists/analog/help/21430 On 20 Jul 2009 at 12:58, Aengus wrote: > If "real" Safari browsers are identified as 5.something, and Chrome > browsers as 530, then > > BROWSUMALI 20 Jul 2009 10:34:24 -0800 http://www.gossamer-threads.com/lists/analog/help/21429 Dave Sergeant <dave@davesergeant.com> wrote: > On 20 Jul 2009 at 10:59, Aengus wrote: > >> According to Google's own documentation, the Useragent for 20 Jul 2009 09:58:33 -0800 http://www.gossamer-threads.com/lists/analog/help/21428 On Jul 20, 2009, at 4:51 AM, Dave Sergeant wrote: > I don't seem to be seeing the Google Chrome browser in my browser > summary, every other browser a 20 Jul 2009 09:22:34 -0800 http://www.gossamer-threads.com/lists/analog/help/21427 On 20 Jul 2009 at 10:59, Aengus wrote: > According to Google's own documentation, the Useragent for Chrome looks > like: Mozilla/5.0 (Windows; U; Win 20 Jul 2009 08:26:08 -0800 http://www.gossamer-threads.com/lists/analog/help/21426 The changes to detect Chrome are not difficult indeed ... this is what I have done on our server: stratos1 7 # diff analog-6.0/src/tree.c analog-6.0- 20 Jul 2009 08:14:54 -0800 http://www.gossamer-threads.com/lists/analog/help/21425 On 7/20/2009 4:51 AM, Dave Sergeant wrote: > I am gradually getting my analog output files configured the way I like > them - slow progress, unfortun 20 Jul 2009 07:59:26 -0800 http://www.gossamer-threads.com/lists/analog/help/21424 I am gradually getting my analog output files configured the way I like them - slow progress, unfortunately the analog help is a bit vague in some a 20 Jul 2009 01:51:44 -0800 http://www.gossamer-threads.com/lists/analog/help/21423 Hi Roger, thanks for the reply, a location change may be what is causing it to not read. I'm going to look into that. Thanks Louise -----Origina 15 Jul 2009 11:16:04 -0800 http://www.gossamer-threads.com/lists/analog/help/21422 Hello Aengus, thank you for your response. You're not discouraging me, I love to learn about this, I just don't want to do something to screw up the 15 Jul 2009 11:14:29 -0800 http://www.gossamer-threads.com/lists/analog/help/21421 Louise Martineau <lmartineau@sema4usa.com> wrote: > Hi have been tasked with obtaining the listing of hits to a website my > company is overseeing. I 15 Jul 2009 10:37:33 -0800 http://www.gossamer-threads.com/lists/analog/help/21420 Analog reads your web server log files. Likely it's currently configured to look at old log files. You need to point it at the current log files and r 15 Jul 2009 10:09:21 -0800 http://www.gossamer-threads.com/lists/analog/help/21419 Louise Martineau wrote: > Hi have been tasked with obtaining the listing of hits to a website my > company is overseeing. I am in no way a web perso 15 Jul 2009 10:08:30 -0800 http://www.gossamer-threads.com/lists/analog/help/21418 Hi have been tasked with obtaining the listing of hits to a website my company is overseeing. I am in no way a web person so am not sure what is need 15 Jul 2009 09:00:32 -0800 http://www.gossamer-threads.com/lists/analog/help/21417 Thanks. Glad to know the problem is not the format. I will try to see what else is causing the problem. Dan On Wed, 2009-07-08 at 18:46 -0500, Aen 09 Jul 2009 07:32:29 -0800 http://www.gossamer-threads.com/lists/analog/help/21416 Roger <roger@roger-beaumont.co.uk> wrote: > Dan Hough wrote: >> I am trying to follow the CIS Security Configuration Benchmark for >> Apache Web Serve 08 Jul 2009 16:46:20 -0800 http://www.gossamer-threads.com/lists/analog/help/21415 Dan Hough wrote: > I am trying to follow the CIS Security Configuration Benchmark for > Apache Web Server 2.2.0. I have a new apache install using Re 08 Jul 2009 14:43:52 -0800 http://www.gossamer-threads.com/lists/analog/help/21414 I am trying to follow the CIS Security Configuration Benchmark for Apache Web Server 2.2.0. I have a new apache install using RedHat EL 5.3. The htt 08 Jul 2009 14:09:43 -0800 http://www.gossamer-threads.com/lists/analog/help/21413 No. Plenty of TYPEALIAS though. -----Original Message----- From: analog-help-bounces@lists.meer.net [mailto:analog-help-bounces@lists 30 Jun 2009 07:38:29 -0800 http://www.gossamer-threads.com/lists/analog/help/21412 Hello Aengus, I just went back and re-read your post from August 21, 2008 where someone else appears to ask the same question. From your response, it 29 Jun 2009 14:47:04 -0800 http://www.gossamer-threads.com/lists/analog/help/21411 Thanks for your response. I was out of the office for a few days. I have been experimenting with the FILEINCLUDE option and the USER reports. While 29 Jun 2009 13:59:04 -0800 http://www.gossamer-threads.com/lists/analog/help/21410 Do you have REQALIAS in place that may be changing how those are displayed? -- Jeremy Wadsack On Mon, Jun 29, 2009 at 3:11 AM, Brereton, Stephen < 29 Jun 2009 08:56:00 -0800 http://www.gossamer-threads.com/lists/analog/help/21409 Hi - sorry for the delay in replying. Been busy! I've switched the file list to the bare minimum to get any data out - per these settings: Analysing 29 Jun 2009 03:11:08 -0800 http://www.gossamer-threads.com/lists/analog/help/21408 Hi all, Location: South America / Argentina Bandwidth: 100 mbit, Organization name: Patan.com.ar ISP Argentina (http://www.patan.com.ar) Mirror 27 Jun 2009 12:33:53 -0800 http://www.gossamer-threads.com/lists/analog/help/21407 Sorry about that! I must have missed it. Thank you. > Date: Wed, 24 Jun 2009 10:27:33 -0400 > From: analog07@eircom.net > To: analog-help@lists.meer 24 Jun 2009 08:57:46 -0800 http://www.gossamer-threads.com/lists/analog/help/21406 On 6/24/2009 9:44 AM, Joe ! wrote: > Thanks. > > Any idea how I can write a logformat for this: > 2009-06-24 05:18:53 0.0050 123.456.78.89 24 Jun 2009 07:27:33 -0800 http://www.gossamer-threads.com/lists/analog/help/21405