[Logwatch-Devel] http log formats

Markus Lude lude at informatik.uni-tuebingen.de
Fri Jun 10 20:52:05 MST 2005


On Tue, May 24, 2005 at 09:08:49PM -0700, Bjorn L. wrote:
> 
> A proposal for the http service:
> 
> One of the issues with the current http script is that
> only one format is allowed.  There are two common
> formats (Common Log Format and Combined Log Format),
> and ssl requests usually use a third one (I think it
> is sometimes called extended log format).  The current
> format for HTTP_FIELDS and HTTP_FORMAT is somewhat
> cryptic, as well.
> 
> The attached code replaces those two variables with
> a single one, $LogFormat, which happens to be the
> same as the LogFormat parameter in the httpd
> configuration file.  It adds the "|" character
> to concatenate multiple such strings.  The
> default is set to the three most common formats,
> so hopefully we'd see fewer queries about the
> $HTTP_FORMAT/FIELD error message.
> 
> So give it a try, especially if you define your
> own custom format.  The old HTTP_FIELDS and
> HTTP_FORMATS are used if defined, to retain
> backwards compatibility for folks that have
> modified their conf file.

Seems to hang here in the loop while parsing the logformat. The first
entry (client_ip) is recognized correctly, but then the regexp is matched
forever.

For now I go back to the old version. I hope I have time to look into it
deeper during the next days.

Regards,
Markus



More information about the Logwatch-Devel mailing list