Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Parsing Error on Log Turn-Over Message #1646

sarcanon opened this issue Jan 2, 2020 · 1 comment

Parsing Error on Log Turn-Over Message #1646

sarcanon opened this issue Jan 2, 2020 · 1 comment


Copy link

@sarcanon sarcanon commented Jan 2, 2020

OpenBSD 6.6-current
Nginx 1.16.1
GoAccess 1.3

Hello. I am getting the following error when attempting to parse a Combined Log File format log:

vergil# goaccess /var/www/logs/rib_access.log -a -o /var/www/htdocs/rib/rpts/report.html
Parsed 1 linesproducing the following errors:

Token 'vergil' doesn't match specifier '%h'

Format Errors - Verify your log/date/time format

The first line of the log being parsed is:

2019-12-30T05:00:01.564Z vergil newsyslog[20784]: logfile turned over

In the configuration file, relevant formats are set as:

time-format %H:%M:%S
date-format %d/%b/%Y
log-format %v:%^ %h %^[%d:%t %^] "%r" %s %b "%R" "%u"

Just speculating here, but perhaps the time format in the newsyslog message is confusing the parser? In any event, I see no way to configure goaccess to ignore the newsyslog message, and I can't see anything else in the man page that is irrelevant.

Any suggestions would be greatly appreciated.

Thank you.


This comment has been minimized.

Copy link

@allinurl allinurl commented Jan 2, 2020

Are you parsing a web access log?

GoAccess requires the following fields:

a valid IPv4/6 %h
a valid date %d
the request %r

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
None yet
2 participants
You can’t perform that action at this time.