Re: Re: Re: Re: Corrupt logfile lines

Aengus <[email protected]> Wed, 25 Feb 2009 07:29:19 -0500
Newsgroups gmane.comp.web.analog.general
Message-ID <[email protected]>
On 2/25/2009 2:47 AM, Nanu Kalmanovitz wrote:

> What shall i change and where?

Your logfile isn't particularly big. Open it in a text editor and have a 
look at the entries. It appears that your web server should be creating 
logfile entries that have a Referrer field and a Browser Agent field, 
("Combined" format) but the only lines that we've seen are lines that 
don't contain those fields. That suggests that your web server is 
generating a logfile with 2 different formats. That's an Apache 
question, not an Analog question.

Because you've told Analog to use the COMBINED format to read the 
logfile, it marks any lines that aren't in COMBINED format as corrupt.

The simple answer is that you can probably add LOGFORMAT COMMON 
immediately after your LOGFORMAT COMBINED line in your analog.cfg file, 
and Analog will parse both types of lines. But that won't tell you why 
your web server is using two different logformats, (or whether it's 
recording the same request twice).

Aengus
+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------