Skip to content

apache2-logs parser fails on exotic case of (combined) log #1764

@Korenchkin

Description

@Korenchkin

i have some old(really old) programs that query some debian 11 (also almost old) apache2,so not sure if it is relevant in newer versions,but sometimes apache generates slightly different log at "%u" (3rd parameter i believe),not sure if program sends empty username?,but i'm getting it from small % of ips(small chunk of ips out of small chunk quering api),but here are log lines:

1.2.3.4 - - [12/Apr/2026:14:50:12 +0200] "GET urlxxx HTTP/1.1" 200 742 "-" "Mozilla/3.0 (compatible; Indy Library)"
1.2.3.4 - "" [12/Apr/2026:18:22:20 +0200] "GET urlyyy HTTP/1.1" 200 1334 "-" "Mozilla/3.0 (compatible; Indy Library)"

notice 3rd param "" instead of -
(that would be "COMMONAPACHELOG" part of parser i believe)
finally i forced - to both 2nd and 3rd parameter in apache log settings,so workaround is pretty easy,i don't use apache login,so no need for username for me

not sure how common this is,so probably a small inconvenience only...

Apache/2.4.66 (Debian) OpenSSL/1.1.1w

thanks

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions