Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Parsing Error on Log Turn-Over Message #1646

Open
sarcanon opened this issue Jan 2, 2020 · 1 comment
Open

Parsing Error on Log Turn-Over Message #1646

sarcanon opened this issue Jan 2, 2020 · 1 comment

Comments

@sarcanon
Copy link

@sarcanon sarcanon commented Jan 2, 2020

OpenBSD 6.6-current
Nginx 1.16.1
GoAccess 1.3

Hello. I am getting the following error when attempting to parse a Combined Log File format log:

vergil# goaccess /var/www/logs/rib_access.log -a -o /var/www/htdocs/rib/rpts/report.html
/var/www/logs/rib_access.log
Parsed 1 linesproducing the following errors:

Token 'vergil' doesn't match specifier '%h'

Format Errors - Verify your log/date/time format

The first line of the log being parsed is:

2019-12-30T05:00:01.564Z vergil newsyslog[20784]: logfile turned over

In the configuration file, relevant formats are set as:

time-format %H:%M:%S
date-format %d/%b/%Y
log-format %v:%^ %h %^[%d:%t %^] "%r" %s %b "%R" "%u"

Just speculating here, but perhaps the time format in the newsyslog message is confusing the parser? In any event, I see no way to configure goaccess to ignore the newsyslog message, and I can't see anything else in the man page that is irrelevant.

Any suggestions would be greatly appreciated.

Thank you.

@allinurl

This comment has been minimized.

Copy link
Owner

@allinurl allinurl commented Jan 2, 2020

Are you parsing a web access log?

GoAccess requires the following fields:

a valid IPv4/6 %h
a valid date %d
the request %r

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.