[analog-help] log format conundrum

[Aengus]

edward rikard-bell <rikard at wmbproductions.com> wrote:

>> I've configured the format for analog.cfg:
>> (%v: [%d/%M/%y:%h:%n:%j %j] %s - - "%j %r %j" %c %b "%f" "%B")
>>
>> C: whackmybush.com: [03/Oct/2007:16:18:32 +0100] 66.214.232.81 - -
>> "GET /rss.xml HTTP/1.1" 200 19245 "-" "iTunes/7.4.2 (Macintosh; N;
>> Intel)"
>> C:                            *

The * is under 2007. You have defind that field as %y (lowercase), which 
the documenattion says is "year, last two digits". But your logfile has 
a 4 digit year, which is %Y (uppercase).

LOGFORMAT (%v: [%d/%M/%Y:%h:%n:%j %j] %s - - "%j %r %j" %c %b "%f" "%B")

should do the job.

http://analog.cx/docs/logfmt.html

Aengus