
March 12th, 2002, 05:36 AM
|
|
Contributing User
|
|
Join Date: Apr 2001
Location: London, England
Posts: 262
Time spent in forums: 26 m 58 sec
Reputation Power: 8
|
|
|
Log File Analyzing
Hello,
I user the following in my vhosts.conf file to rotate my logs as they were becoming unmanageably large:
LogFormat "%h %a %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" log_this
CustomLog "|/usr/local/apache/bin/rotatelogs /home/users/intersharedev/logs/access_log 2593000" log_this env=!dont_log
And this has resulted in log entries which look like:
194.128.255.225 194.128.255.225 [04/Feb/2002:15:07:42 +0000] "GET /bestpractices/index.php HTTP/1.1" 200 15450 "http://www.casewise.
co.uk/lounges/index.php" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
As you can see the IP address is being inserted twice. How can I get rid of this?
Also I use webtrends to analyze logfiles, however it doesn't recognise this format, I hope that it will recognise the format as long as the IP address is only there once, however I'm not sure. Has anyone any suggestions what I can do going forward, and also how I can analyze my previous logs in the above format?
Thanks very much.
|