Welcome to WebmasterWorld Guest from 18.104.22.168
The log format is Apache ( not extended Apache) and I have elected to look up/ resolve IP addresses in web trends.
The reports that I really want are the referers and keywords.
These give what look like the numerical IP and then part of the next two fieds, see below, in the Webtrends report.
22.214.171.124 - - [18/
If I openthe log file the early part of the data string looks like this'
www.nitmix.com¦126.96.36.199 - - [22/Apr/2001:10:24:10 -0400] "GET / HTTP/1.1" 200 17413 "http://google.yahoo.com/bin/query?p=how+to+get+rid+of+head+lice&hc=0&hs=2" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)"
I dont understand the vertical bar symbol after the URL should it be there?
If any one can help I would be eally pleased.
Webtrends were very unhelpful and Bluehill said they have re structured the log to remove the bar but it's still there.
Sorry it's a long post.
PS Is any one usind Adminder?
Iam very frustrated that Bluehill.com aren't familiar withthis problem.
thanks for the reply
It looks to me as if your log records are in extended Apache format, plus the additional infomation at the start of the record (www.nitmix.comŽ).
Try creating a file with just one record in it, don't worry about the file extension, webtrends should just read it asis, strip out the "www.nitmix.comŽ" bit:
188.8.131.52 - - [22/Apr/2001:10:24:10 -0400] "GET / HTTP/1.1" 200 17413 "http://google.yahoo.com/bin/query?p=how+to+get+rid+of+head+lice&hc=0&hs=2" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)"
Run that through webtrends and see if the output makes sense. If it does go back to your host and ask them to remove the extraneous info at the start of the record from your logs.
If they do not produce the goods a simple half-dozen line perl script could chop off the unwanted info, alternatively find and replace will probably do the job.