Apache logfile format

[Francis J. Lacoste]

On Fri, 2003-08-08 at 05:54, Wytze van der Raay wrote:
> [...]
>
> > I tried it with both "common" and "combined" but it (of course) didn't 
> > work. I didn't find anything about defining own logfile formats so I'm 
> > asking you guys. (BTW: I got modlogan working with this format, but I'm not 
> > satisfied with modlogan's features so I'm checking out
> > logreport right now ;))

You will find the documentation on how to support new log formats in the
Lire Developer's Manual "Part II: Using the Lire Framework".

> > 
> > Can anybody help?
> 
> LogReport's Lire  supports a limited number of logfile formats
> "out of the box", including a.o. "common", "combined", "modgzip"
> and "w3c_extended".
> But since all www reports are generated from a common intermediate
> format, the www superservice DLF (distilled logfile), Lire can handle
> alternative formats by supplying a converter for the new format.
> The www DLF schema is described in www/www.xml, and also in chapter 12
> of the developer's manual.
> You can use an existing converter, e.g. www/script/combined2dlf,
> and modify it to suit your particular format.
> 
> One thing to note though is that the www DLF does not accomodate a
> virtual host (%V) field. It's assumed that you want to produce reports
> per virtual host, and have split up the logfiles accordingly.
> If you don't want to do that, you could perhaps instruct your DLF
> convertor to concatenate the %V and %f fields into the DLF's
> requested_page field.
> 

It is really simple to add a new field to the existing www schema. This
way, he could write report specifications which would use that
information.

Writing the DLF converter could be easily achieved by copy/modification
of the existing common and combined DLF converter. Most of the logic of
the format is encapsulated in functions. The DLF converter would only
have to parse the first field and give the rest to the common2dlf
function (iirc.)


Kind regards,

Francis J. Lacoste

-- 
Francis J. Lacoste              . .           http://www.logreport.org
/^LogReport$/               . .               flacoste at logreport.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.logreport.org/pipermail/questions/attachments/20030814/851ffa38/attachment.bin