Hi - I am very new to AWStats
We have huge apache log files so we do not want to preprocess - recently we added a proxy so the format is standard except the host at the beginning is 99% a proxy and the actual IP is quoted at the end of the record after the quoted browser, but a "-" if the access was from inside the company
What is the best way to handle this situation?
I cannot find a good match in the logformat documentation and searching this forum with messages from 2006 did not help. Perhaps someone can point me to a good example?
So format is
nnn.nnn.nnn.nnn - - [time] "get /.........." ..... "browser" "nnn.nnn.nnn.nnn"
nnn.nnn.nnn.nnn - - [time] "get /.........." ..... "browser" "-"
The first format is predominant an most important, the second is less so but it would be brilliant if AWS had the same possibility as Analog to take the second IP if present, otherwise the first
Thanks for any help
Log in to post a comment.