Mailing List Archive: Analog: Help

LOGFORMAT Question

Index | Next | Previous | View Threaded

loss2gain at loss2gain

Feb 20, 1999, 1:12 PM

Post #1 of 7 (329 views)
Permalink

LOGFORMAT Question

Hi, all.

I'm new to this list but have been using Analog on my local
Windows machine. One on these days, I'll get it figured out on my
unix (apache) server. Another day; another question :-)

Here's my problem. My log format has recently been switched.
The old logs worked without any manipulation of LOGFORMAT in
the cfg file. The new one is causing me fits. I keep getting the
corrupted file message. I've tried several.

Log Sample:
portup205.portup.com | - | [04/Feb/1999:10:18:06 -0500] | "GET
/cards/astronaut.jpg HTTP/1.1" | 304 | - | - |
http://nazarene.loss2gain.com/cards/feb2-96001.html | "Mozilla/4.0
(compatible; MSIE 5.0b2; Windows 95; SPEED)"

Log Breakdown:
1. Host
2. User
3. Date and Time
4. Request header by client
5. Status Code
6. Data Transfer
7. Domain name which was accessed
8. Referer
9. Browser and OS

My Lastest Try (Failed):
LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j] | "%j / %r %j" |
%c | %b | %v | %f | "%B")

Have I missed something? I've read the help files and have a
decent understanding, but I can't seem to find the problem. Is
anyone willing to help?

Thanks in advance! BTW, if I get this one worked out, I start on
redoing Analog on my unix.

Duane Nelson
President, Loss2gaiN Designs
COMPLETE WEB SERVICES: http://www.loss2gain.com
SOUP WITH A MISSION: http://nazarene.loss2gain.com/soulfulbowlful/
DESIGN SAMPLES: http://www.nmdnaz.org/char/
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request[at]lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

jwadsack at flagstaff

Feb 20, 1999, 2:23 PM

Post #2 of 7 (314 views)
Permalink

LOGFORMAT Question [In reply to]

Duane Nelson wrote:

> <snip>
> Log Sample:
> portup205.portup.com | - | [04/Feb/1999:10:18:06 -0500] | "GET
> /cards/astronaut.jpg HTTP/1.1" | 304 | - | - |
> http://nazarene.loss2gain.com/cards/feb2-96001.html | "Mozilla/4.0
> (compatible; MSIE 5.0b2; Windows 95; SPEED)"
>
> Log Breakdown:
> 1. Host
> 2. User
> 3. Date and Time
> 4. Request header by client
> 5. Status Code
> 6. Data Transfer
> 7. Domain name which was accessed
> 8. Referer
> 9. Browser and OS
>
> My Lastest Try (Failed):
> LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j] | "%j / %r %j" |
> %c | %b | %v | %f | "%B")
>
> <snip>
> --------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to analog-help-request[at]lists.isite.net
> with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
> --------------------------------------------------------------------

Duane,

My guess, just from looking at it, is analog is interperting the rest of
the time zone as an invalid field. I think you've also got an extra ' /'
before the request field. Try this and see if it works:

LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j %j] | "%j %r %j" |
%c | %b | %v | %f | "%B")

Jeremy Wadsack
The Flagstaff Link
http://www.flagstaff.net/

--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request[at]lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

loss2gain at loss2gain

Feb 20, 1999, 3:58 PM

Post #3 of 7 (313 views)
Permalink

LOGFORMAT Question [In reply to]

Jeremy Wadsack helped out with:
> My guess, just from looking at it, is analog is interperting the rest of
> the time zone as an invalid field. I think you've also got an extra ' /'
> before the request field. Try this and see if it works:
>
> LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j %j] | "%j %r %j" |
> %c | %b | %v | %f | "%B")

Thank you. It worked. I noted my errors and bow my head to you
in gratefulness.

Duane Nelson
President, Loss2gaiN Designs
COMPLETE WEB SERVICES: http://www.loss2gain.com
SOUP WITH A MISSION: http://nazarene.loss2gain.com/soulfulbowlful/
DESIGN SAMPLES: http://www.nmdnaz.org/char/
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request[at]lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

sret1 at cus

Feb 22, 1999, 6:37 AM

Post #4 of 7 (313 views)
Permalink

LOGFORMAT Question [In reply to]

On Sat, 20 Feb 1999, Jeremy Wadsack wrote:
>
> Duane,
>
> My guess, just from looking at it, is analog is interperting the rest of
> the time zone as an invalid field. I think you've also got an extra ' /'
> before the request field. Try this and see if it works:
>
> LOGFORMAT (%S | %u | [%d/%M/%Y:%h:%n:%j %j] | "%j %r %j" |
> %c | %b | %v | %f | "%B")
>

I believe the timezone was OK, but the other change is needed.

Stephen Turner

--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request[at]lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

manel at iese

Mar 2, 1999, 7:01 AM

Post #5 of 7 (307 views)
Permalink

Logformat question [In reply to]

Hi everyone; sorry for my english and my bored question, but recently i
change my format in a Webstar Server log and i'm going crazy to
configure it correctly.

Any idea?

I've tried this:

LOGFORMAT (%m/%d/%y %w %h:%n:%j %w %S:%j %j %w %r %w "%j" %w %c %w %b %w %j
%w "%B" %w "%u" %w %f)

And this is a sample of log lines:

!!LOG_FORMAT DATE TIME C-IP CS-METHOD CS-URI-STEM CS(HOST) CS-STATUS
BYTES_SENT BYTES CS(USER-AGENT) CS(COOKIE) REFERER
02/01/99 10:22:42 155.54.5.144:80 GET /index.html
"databases.iese.edu" 200 5092 5092 "Mozilla/2.0 (Win95; I;
16bit)" ""
http://www.iese.edu/search/search.idq?CiScope=%2F&CiMaxRecordsPerPage=10&Tem
plateName=query&CiSort=rank%5Bd%5D&HTMLQueryForm=search.html&CiRestrictionDa
ta=gastronomia&Submit=Search
02/01/99 10:22:43 155.54.5.144:80 GET /images/hpph1.jpeg
"databases.iese.edu" 200 8762 8762 "Mozilla/2.0 (Win95; I;
16bit)" "" http://databases.iese.edu/index.html
02/01/99 10:22:43 155.54.5.144:80 GET /images/agescudo.gif
"databases.iese.edu" 200 1684 1684 "Mozilla/2.0 (Win95; I;
16bit)" "" http://databases.iese.edu/index.html
02/01/99 10:23:21 155.54.5.144:80 GET /sectores.qry
"databases.iese.edu" - 4877 4877 "Mozilla/2.0 (Win95; I;
16bit)" "" http://databases.iese.edu/index.html
02/01/99 10:23:21 155.54.5.144:80 GET /graphics/fons.gif
"databases.iese.edu" 200 5841 5841 "Mozilla/2.0 (Win95; I;
16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:21 155.54.5.144:80 GET /graphics/blank.gif
"databases.iese.edu" 200 56 56 "Mozilla/2.0 (Win95; I;
16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:21 155.54.5.144:80 GET /graphics/home.gif
"databases.iese.edu" 200 1510 1510 "Mozilla/2.0 (Win95; I;
16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:22 155.54.5.144:80 GET
/graphics/burdeos.gif "databases.iese.edu" 200 54 54
"Mozilla/2.0 (Win95; I; 16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:23:22 155.54.5.144:80 GET
/graphics/botonera96.gif "databases.iese.edu" 200 792 792
"Mozilla/2.0 (Win95; I; 16bit)" "Tango_UserReference=8E8491BD4D609EFC"
http://databases.iese.edu/sectores.qry?function=form
02/01/99 10:24:17 62.81.72.214:80 GET /boc.qry
"databases.iese.edu" - 17915 17915 "Mozilla/2.0 (compatible;
MSIE 3.01; Windows 95)" "Tango_UserReference=6ED1D04E290AAF0C"

Thanks in advance!

------------------------------------------
Manel Carrasco (tel. 932 53 42 00)
Centro Inform?tica (mailto:manel[at]iese.edu)
IESE, Universidad de Navarra, Spain
------------------------------------------
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request[at]lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

jf2412 at columbia

May 5, 2008, 3:53 PM

Post #6 of 7 (259 views)
Permalink

Re: LOGFORMAT question [In reply to]

Hi Steve,

Thanks so much.. I'll try them.

I already tried Angus's LOGFORMAT lines and here's the result:

http://www.columbia.edu/~jf2412/report2/

http://www.columbia.edu/~jf2412/report3/

Thanks again!

Joshua

On 5/3/08 3:51 AM, "Stephen Turner" <analog-author[at]lists.meer.net> wrote:

> I admit to not having tried it, but I think you need two LOGFORMAT
> lines to match the two different formats, and they should look
> something like this:
>
> LOGFORMAT '%S - - [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b "(ref %f)"
> "(client %B)" "vhost %v"'
> LOGFORMAT '%S - - [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b "(ref %f)"
> "(client %B)"'
>
> They have to go in that order. I put the arguments in single quotes
> because they already contain double quotes and parentheses within
> them.

--
Joshua S. Freeman
Director- CUIT Interactive Services
o: 212.854.2083 | m: 347.392.2560
Skype/YIM: karmester | Skype-In: 914.613.3132

+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

analog07 at eircom

May 5, 2008, 4:12 PM

Post #7 of 7 (264 views)
Permalink

Re: LOGFORMAT question [In reply to]

Joshua S. Freeman <jf2412[at]columbia.edu> wrote:
> Hi Steve,
>
> Thanks so much.. I'll try them.
>
> I already tried Angus's LOGFORMAT lines and here's the result:
>
> http://www.columbia.edu/~jf2412/report2/
>
> http://www.columbia.edu/~jf2412/report3/

I forgot about the closing parentheses, so the referrer and Browser strings using my LOGFORMATs have a trailing ). Not really a problem for the Browser Summary, but if you click on any of the Referrers in your Referrer report, you should get an error response.

Stephens version tells Analog that the closing parenthesis around these fields aren't actually part of the Browser and Referrer strings.

Aengus

+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com