[Logwatch-Devel] Parsing RealServer Logs

Pelkey, Jeff Jeff.Pelkey at titan.com
Fri Dec 9 13:43:26 MST 2005


Howdy Bjorn & Markus!

Thanks for the input.  Here are the results listed below.

>From: "Bjorn L." <bl_logwatch at mblmail.net>

>This indeed looks like the default, with additional fields.  Have you
>tried the default settings (i.e., leaving LogFormat, HTTP_FIELDS, and
>HTTP_FORMAT commented out?)

Yes, and unfortunately got the same result as I had reported. 
------------------------------

>From: Markus Lude <lude at informatik.uni-tuebingen.de>
>
>Try to introduce two dummy variables in HTTP_FIELDS for the fields where
>usually the two dashes are and remove the two "dash" from HTTP_FORMAT?
>
>$HTTP_FIELDS = "client_ip ident userid timestamp foo     request http_rc bytes_transfered agent"
>$HTTP_FORMAT = "space     space space  brace     space   quote   space
>space            brace brace brace space space space space space"

Here's the output I received:
sudo logwatch --service RealMedia --print

 ################### LogWatch 7.1 (11/12/05) ####################
        Processing Initiated: Fri Dec  9 15:31:16 2005
        Date Range Processed: yesterday
                              ( 2005-Dec-08 )
                              Period is day.
      Detail Level of Output: 10
              Type of Output: unformatted
           Logfiles for Host: XXXXXXX
  ##################################################################

 --------------------- Real Media Begin ------------------------

 0.85 MB transferred in 49 responses  (1xx 0, 2xx 44, 3xx 0, 4xx 5, 5xx 0)
     2 Sound files (0.84 MB),
     5 Content pages (0.00 MB),
    42 Other (0.02 MB)

 Requests with error response codes
    404 Not Found
       /: 1 Time(s)
       robots.txt: 4 Time(s)

 ---------------------- Real Media End -------------------------


 ###################### LogWatch End #########################

So it seems to skip all the entries.  I will tinker around with this some more and let you know if/how I get this working.
Much Obliged -- Jeff.



More information about the Logwatch-Devel mailing list