Sorry - I missed that on the cut-n-paste operation. More complete is:
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I
%O TIME: %T" resptrack
CustomLog /var/log/httpd/access_log resptrack
The problem I'm having is that the vast majority of the requests logged do
follow the format as defined. However, some (say, 1 out of every 100 or so)
do not. And the ones that do not consistently come from the same requestor.
I'd understand if I had hyphens for the missing fields - but the logger just
doesn't seem to even recognize the format string at all.
On 3/13/06 12:33 PM, "Joshua Slive" <joshua@xxxxxxxx> wrote:
> On 3/13/06, Ross A. Del Duca <RDelDuca@xxxxxxxxxxxxx> wrote:
>> I've been beating this up for some time, so any hints/ideas anyone has would
>> be great.
>>
>> Basically, I have certain requests from a small number of specific
>> requestors that don't log all of the data in the access_log.
>>
>> My log format is:
>>
>> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I
>> %O TIME: %T"
>
> The LogFormat directive on its own doesn't do anything if you are
> using the CustomLog directive. You need to use LogFormat to define a
> nickname (such as "combined" in the default config) and then use this
> nickname in your CustomLog directive.
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
--
Ross A. Del Duca
Security Officer
Infrastructure Architect
RDelDuca@xxxxxxxxxxxxx
(916)438-1139
---------------------------------------------------------------------------
This message contains confidential information intended only for the use of
the addressee named above and may contain information that is legally
privileged. If you are not the addressee, or the person responsible for
delivering it to the addressee, you are hereby notified that reading,
disseminating, distributing or copying this message is strictly prohibited.
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.1 (Darwin)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=yWc6
-----END PGP PUBLIC KEY BLOCK-----
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|