Mplungjan - 2013-04-18

Hi - I am very new to AWStats

We have huge apache log files so we do not want to preprocess - recently we added a proxy so the format is standard except the host at the beginning is 99% a proxy and the actual IP is quoted at the end of the record after the quoted browser, but a "-" if the access was from inside the company

What is the best way to handle this situation?

I cannot find a good match in the logformat documentation and searching this forum with messages from 2006 did not help. Perhaps someone can point me to a good example?

So format is

nnn.nnn.nnn.nnn - - [time] "get /.........." ..... "browser" "nnn.nnn.nnn.nnn"
nnn.nnn.nnn.nnn - - [time] "get /.........." ..... "browser" "-"

The first format is predominant an most important, the second is less so but it would be brilliant if AWS had the same possibility as Analog to take the second IP if present, otherwise the first

Thanks for any help