logfiles out of chronological order

see something new every day!

[chewy]

A new set of logfiles from a new client is generating an interesting error - one that I have never seen before.

It says that the logs are out of chronological order.

The actual message says that "too many records exceed the allowed chronological variance".

Sure enough, when manually viewing the logs, there are a few GET statements that are like 8 and 10 seconds out of order.

My contact at NetIQ says I need to write a script to sort these into order before I analyse them.

Does anyone have such a script avaliable - or is there any other workaround possible?

Thanks in advance,

Chew

[antirack]

I've had a similar problem ages ago, with multiple log files overlapping and failed to get it working with LogFile Analyzer. That's when I decided that software is a bit too expensive for such missing basic features.

I've been able to process the logfiles with Urchin without any problem. This doesn't really solve your problem, I know, but maybe it helps making future purchase decisions.

[chewy]

For the record, there is a logmerger product that will merge mutiple logs into a single file while keeping the files in chronological order. Sticky me for a URL if you need it.

btw, it did not solve my specific problem although it may have solved yours.

C.