I've juste set up a new Linux box, wich is only a web frontal.
The access and error Apache logs are deported on another box, with a remote syslog (very simply and common configuration, nothing special).
But... I've got à "little" issue : in remote mode, syslog add some fieds at beach line of access.log, like this :
Apr 3 06:47:52 88.191.xxx.xx logger: 81.57.220.xx - - [03/Apr/2008:06:47:52 +0200] "GET /feed/atom/ HTTP/1.1" 200 18334 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9b4) Gecko/2008030714 Firefox/3.0b4"
So, I've set up Awstats with a custom log format : LogFormat="%other %other %other %other %other %host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot"
But but but...
As you can see, between Apr and 3, there is not only one space... but two !! It append only when the day number is smaller than 10.
Of course, add two spaces between %other and %other doesn't work (too easy :) ).
So... if you've got any idea to solve the issue, you're welcome :)
Thanks ! (and yes, I know, my english is strange, I know :) )
I had this problem and used a simple Perl command on the logs before hand:
/usr/bin/perl -pi -e 's/\s\s/ /g' log_name.log
Any LogFormat that you devise would need to change on the 10th of the month, wouldn't it?
Run the log through sed to change the double space to a single space. Presto.
Hum... there are no built-in solution, without calling an external program like sed ? (it's not a problem for me, just a question :) )
I don't know why awstats would build in a solution for a problem that isn't all that common.
Are you using Apache's module to write to the remote syslog? Can the datestamp format be modified? That could be a solution.
I know this is a little out of date, but I've been searching for a solution to
this for a few days and it can be done in the awstats.XXXXX.conf file directly
the line is:
LogFile="/bin/sed 's/ / /g' </tmp/apacheservers.log |"
Obviously changing the location of your access log file to suit. Thanks to
oustedaisse for the logformat solution though :-)
thank you for the hint. That saved my workday ☺!
Log in to post a comment.
Sign up for the SourceForge newsletter:
You seem to have CSS turned off.
Please don't fill out this field.