[Logwatch-Devel] http log formats
lude at informatik.uni-tuebingen.de
Fri Jun 10 20:52:05 MST 2005
On Tue, May 24, 2005 at 09:08:49PM -0700, Bjorn L. wrote:
> A proposal for the http service:
> One of the issues with the current http script is that
> only one format is allowed. There are two common
> formats (Common Log Format and Combined Log Format),
> and ssl requests usually use a third one (I think it
> is sometimes called extended log format). The current
> format for HTTP_FIELDS and HTTP_FORMAT is somewhat
> cryptic, as well.
> The attached code replaces those two variables with
> a single one, $LogFormat, which happens to be the
> same as the LogFormat parameter in the httpd
> configuration file. It adds the "|" character
> to concatenate multiple such strings. The
> default is set to the three most common formats,
> so hopefully we'd see fewer queries about the
> $HTTP_FORMAT/FIELD error message.
> So give it a try, especially if you define your
> own custom format. The old HTTP_FIELDS and
> HTTP_FORMATS are used if defined, to retain
> backwards compatibility for folks that have
> modified their conf file.
Seems to hang here in the loop while parsing the logformat. The first
entry (client_ip) is recognized correctly, but then the regexp is matched
For now I go back to the old version. I hope I have time to look into it
deeper during the next days.
More information about the Logwatch-Devel