>> My Provider added the {X-Forwarded-For} to catch the "logins via
>> Proxyserver" he said and this was where my problem started.
> You never answered a question I asked before I suggested you provide
> some sample lines - "Does the report that is generated indicate that
> Analog recognizes any of the lines in your log?".
I tried 3 different lines now in the analog.conf, 2 lines to cover the old
logformat and one line that you proposed for the added "{X-Forwarded-For}".
There are still warnings about corrupt lines but now Analog recognizes the
different types in one operation. Is it o.k. to have a configuration like
this? ->
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b %v "%f" "%B")
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b %v "%f" "%B")
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f" "%B"
"%j")
> If you have lines in your log from before your provider added
> "{X-Forwarded-For}" then you'll get the "large number of corrupt lines"
> warning until you put a LOGFORMAT command for the old lines in your .cfg
> file too. If you have more than one type of format, you have to provide
> multiple LOGFORMAT lines.
>
> Aengus
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
