[analog-help] Problems with definition for apachewebserve runningon IBM system i5

[Aengus]

On Thursday, May 03, 2007 8:21 AM [EDT],
Rolf Busch <Busch at pcsacc400.de> wrote:

> Sorry the following message are only for 117 statements, 129734 are
> processed without problems.
>
> Now I've got the following:
>
> C: 193.175.11.117 - - [31/Jul/2006:21:11:55 +0200] "GET /" 200 5473"
> C:                                                         *
> C: 193.175.11.117 - - [31/Jul/2006:21:11:55 +0200] "GET /faq.htm" 200
> 11753"
> C:                                                                *
> C: 193.175.11.117 - - [31/Jul/2006:21:11:55 +0200] "GET /first.htm"
> 200 19352"
> C:                                                                  *
> C: 193.175.11.117 - - [31/Jul/2006:21:11:55 +0200] "GET
> /First/Q001.htm" 200 6047"
> C:

These lines don't have the HTTP/* elements, so you'll need two LOGFORMAT 
statements:

LOGFORMAT (%s %j %j [%d/%M/%Y:%h:%n:%t %j] "%j %r %j" %c %b")
LOGFORMAT (%s %j %j [%d/%M/%Y:%h:%n:%t %j] "%j %r" %c %b")
LOGFILE Web2006.log

They need to be in that order, because the 2nd one is "greedier" than the 
first, and will match all your lines, but will include the "HTTP/1.1" in the 
filename in the request report (Try it and see).

Aengus