Re: log format conundrum

edward rikard-bell <rikard-0sqkRBv3QKuls/Jj4OG/[email protected]> wrote:

>> I've configured the format for analog.cfg:
>> (%v: [%d/%M/%y:%h:%n:%j %j] %s - - "%j %r %j" %c %b "%f" "%B")
>>
>> C: whackmybush.com: [03/Oct/2007:16:18:32 +0100] 66.214.232.81 - -
>> "GET /rss.xml HTTP/1.1" 200 19245 "-" "iTunes/7.4.2 (Macintosh; N;
>> Intel)"
>> C:                            *

The * is under 2007. You have defind that field as %y (lowercase), which 
the documenattion says is "year, last two digits". But your logfile has 
a 4 digit year, which is %Y (uppercase).

LOGFORMAT (%v: [%d/%M/%Y:%h:%n:%j %j] %s - - "%j %r %j" %c %b "%f" "%B")

should do the job.

http://analog.cx/docs/logfmt.html

Aengus


+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------