Analog / Ezproxy

> I have an issue where the Proxy server I am running (EZPROXY) generates a
> unique logfile format that I can't seem to get Analog 6.0 to recognise.
> 
> Some necessary info:
> 	Ezproxy and Analog (Same server, Fedora 8)
> 
> 	The Ezproxy logfile format is specified in the ezproxy.cfg file,
> which is
> 			  LogSPU  spu.log %{ezproxy-spuaccess}i %h  %l %u %t
> "%r" %s %b
> 
> 	Some example logs generated by Ezproxy:
> 			
> 		local 66.158.45.2 - - [15/Jul/2008:18:57:36 -0600] "HEAD
> http://infoweb.newsbank.com?db=DOBB HTTP/1.1" 301 491
> 		local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD
> http://infoweb.newsbank.com?db=CTRB HTTP/1.1" 301 491
> 		local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD
> http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defau
> ltdb=aph HTTP/1.1" 301 585
> 		proxy 205.188.116.15 - gNDs4AexHJMk3B9 [15/Jul/2008:21:04:33
> -0600] "GET
> http://proxy-ob.dupagels.lib.il.us:18457/login?url=http://infoweb.newsbank
> .com?db=CTRB 						HTTP/1.1" 200 0
> 		proxy 205.188.116.205 - gNDs4AexHJMk3B9
> [15/Jul/2008:21:04:33 -0600] "GET http://infoweb.newsbank.com?db=CTRB
> HTTP/1.1" 200 0
> 		proxy 76.224.8.224  - eJuY424kpSUJqee [16/Jul/2008:11:47:38
> -0600] "GET http://heritagequestonline.com/refurl HTTP/1.1" 200 0
> 
> 	
> 		I need to determine "local" requests from a library as
> opposed to "proxy" requests, and then be able to group them so libraries
> know how many local verses remote 				requests are
> made
> 
> 
> When I enter the above log format in analog.cfg:
> 
> 	LOGFORMAT	(%{ezproxy-spuaccess}i %h %l %u %t "%r" %s %b)
> 
> I receive the following results when I run analog:
> 
> 	./analog: analog version 6.0/Unix
> ./analog: Warning C: Bad argument in configuration command: ignoring it:
>   LOGFORMAT (%{ezproxy-spuaccess}i %h %l %u %t "%r" %S %b)
> ./analog: ...cont..:   (reason: an unknown item code is present)
>   (For help on all errors and warnings, see docs/errors.html)
> ./analog: Warning L: Large number of corrupt lines in logfile
>   /usr/local/analog-6.0.3/logfile.log: turn debugging on or try different
>   LOGFORMAT
>     Current logfile format:
>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b\n
>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b\n
>       %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b\n
> ./analog: Warning R: Turning off empty time reports
> ./analog: Warning R: Turning off empty Request Report
> ./analog: Warning R: Turning off empty Organisation Report
> 
> I thought that the above output in the "Current logfile format" might be
> analogs attempt at guessing the logfile format, so I tried all the
> different iterations, but yet I am still receiving the "corrupt lines in
> logfile".  I have turned on debugging, but it doesn't seem to give me any
> extra information as to what is going on.
> 
> Any help would be appreciated.
> 			
> 
> Brian Clanton
> mailto:[email protected]
> Systems Technician
> Dupage Library System
> http://www.dupagels.lib.il.us
> 127 South First Street
> Geneva IL, 60134
> Voice/Voicemail    (630) 232-8457  Ext. 210
> Fax:  (630) 232 0699
>  
> Automation Department direct line:
>  
> Voice/Voicemail  (630) 232-4674
>

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------