Re[2]: [Xitami] Xitami-log-examining-tools?

[Melle Koning]

Dear Craig,

Saturday, December 01, 2001, 10:27:03 AM, you wrote:

>> Do any xitami-log-examening tools exist?

> http://www.statslab.cam.ac.uk/~sret1/analog/

looks extremely good, but analog quircks about the logformat?

What I did now was edit analog.cfg and tell analog where my logfiles
are and what the output should be:
==
LOGFILE \\server\c\xitami\logs\ac*.*
OUTFILE \\server\c\inetpub\wwwroot\analogreport.html
==

This seems to work. That is, analog tries processing the log-files.

But analog tells me:
==
  logfile \\server\c\xitami\logs\ac011122.log: turn debugging on or try
  different LOGFORMAT
    Current logfile format:
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B"\n
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B"\n
      %S %j %j [%d/%M/%Y:%h:%n:%j] "%r" %c %b "%f" "%B"\n
===

But I have difficulty entering the right format. This is what the
lines look like in my access.log files:

===
213.84.56.202 - - [17/Nov/2001:00:07:28 +0100] "GET /sandston.gif
HTTP/1.1"   200   9706  "http://hace.dyndns.org/diplomacy/dipned.html"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
===

(this is one entry from the logfile, all on one line)

If you know the right (xitami) LOGFORMAT I should enter for the above
logfile-line I would be very much helped!

[ Later ]

It seems analog did something after all!
Have a look at the results at:
http://hace.dyndns.org/analogreport.html

But then again: How should I disable all the '/script/' logging?
It does not recognize the '404' message, see the following line:

===
62.194.210.43     -     -     [17/Nov/2001:15:27:17     +0100]    "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir  HTTP/1.0"  404 -1 ""
""
===

Thanks in advance,

-- 
Best regards,
 Melle                            mailto:m.koning10@chello.nl