rejetto forum

analog won't parse HFS apache style log

0 Members and 1 Guest are viewing this topic.

Offline ninjapimp

  • Occasional poster
  • *
    • Posts: 71
    • View Profile
is there anyone who is good with analog? http://www.analog.cx/
i use it alot to parse my IIS logs but I'm unable to get analog to parse hfs logs
i read here: http://www.analog.cx/docs/logfmt.html
and have applied the proper logformat but no dice

i set it to log apache style format: %h %l %u %t "%r" %>s %b "%{Referer}i %z"
logfile:
76.xxx.xx.229 - - [01/Dec/2009:00:04:00 -0600] "GET /iPhone/App-Store/Cydia%20downloads/lockinfo.jpg HTTP/1.1" 200 21520 -http://www.xxxxxxxx.com/showthread.php?t=6370&page=2 -

but when i run analog it parses nothing.
however when i run analog to parse my IIS logs it works perfect.
#Software: Microsoft Internet Information Services 7.0
#Version: 1.0
#Date: 2009-12-01 01:09:08
#Fields: date time cs-method cs-uri-stem cs-uri-query cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken
2009-12-01 01:09:08 GET /movies - - 76.xx.xx.240 Mozilla/5.0+(PLAYSTATION+3;+1.00) 301 0 0 366 224 561


my analog config info for HFS:
LOGFILE C:\hfs\hfs_log_month-12.log
OUTFILE Report.html

and my lastly my analog config for IIS:
LOGFILE C:\inetpub\logs\LogFiles\W3SVC2\u_ex0912.log

other than file location everything else is the same but it simply won't parse the HFS log
what do i need to change or do to make it work
if someone could point me in a good direction i'd be grateful

i tried adding this to the config file:
APACHELOGFORMAT (%h %l %u %t "%r" %>s %b "%{Referer}i %z")
LOGFILE C:\hfs\hfs_log_month-12.log
OUTFILE Report.html
but no luck
« Last Edit: December 01, 2009, 07:31:06 PM by ninjapimp »



Offline ninjapimp

  • Occasional poster
  • *
    • Posts: 71
    • View Profile
good idea
although analog should be able to do it i could not figure it out
but i found this one
http://www.weblogexpert.com/download.htm
and works nicely


Offline r][m

  • Tireless poster
  • ****
    • Posts: 347
    • View Profile
ninjapimp
I used to use Analog with HFS. I also used web log expert briefly.
If you decide to try Analog again, post here and I'll try to help.
I still have mine set up, I just went back to the regular HFS log,
it gives more info.


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13310
    • View Profile
maybe it's because you enclosed  "%{Referer}i %z"
in a single pair of quotes.
try "%{Referer}i" "%z"
and if it doesn't work, remove it all, back to the "standard" log, ensure this is working as it should, and from there go adding step-by-step more information you need, always testing perfect functioning with Analog at every step.


Offline r][m

  • Tireless poster
  • ****
    • Posts: 347
    • View Profile
maybe it's because you enclosed  "%{Referer}i %z"
in a single pair of quotes.
try "%{Referer}i" "%z"
and if it doesn't work, remove it all, back to the "standard" log, ensure this is working as it should, and from there go adding step-by-step more information you need, always testing perfect functioning with Analog at every step.
My testing indicates "%{Referer}i" "%z" doesn't work. While there may be another way, I never
found it. "%{Referer}i %z" did list the upload.
With events and add to log there are things available that I don't think Apache log & Analog was ever intended to handle.
These screen shots are only just a small bit of whats possible using a data base to sort the log.
This is thanks to the addition of "Tabbed instead of multiline for the log file" feature.