cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

icm http log and web dispatcher output with delimiter

GavDCol
Explorer
0 Kudos
161

Hi

Our icm/HTTP/logging logformat is 

 LOGFORMAT=%t %а %u "%r" %s %b %Lms %{Host}i %P %w1 %w2%y1 %у2 %h %h0 %h1 


When exporting the logs from the Web Dispatcher, the txt file extracts are not easily analysed as there's hundreds of thousands of logs records with various log structures which do not parse into consistent columns for review (I'm looking at approx 400k log record lines).

Is it possible to introduce a delimiter to the logformat, like pipe |, to separate the parameter outputs ?  

or is there a better alternative to view the specific http logs ?  
I need to identify IP addresses for all "trusted" log entries.

Thanks in advance

 

 

Accepted Solutions (0)

Answers (0)