The common_syslog Log Format
Prev | Chapter 2. Writing a New DLF Converter | Next

## The common_syslog Log Format

The log format supported by our DLF converter is simply the standard Common Log Format supported by most web servers with a syslog header prepended to each line. Here is an example of what such a log file might contain:

    May 10 11:13:10 hibou httpd[12344]: Apache/1.3.26 (Unix) Debian GNU/Linux Embperl/1.3.3 PHP/4.1.2 mod_perl/1.26 configured -- resuming normal operations
    May 10 11:13:11 hibou httpd[12345]: 192.168.250.10 - - \
      [10/May/2003:11:13:11 +0200] "GET /" HTTP/1.1 200 1523
    May 10 11:13:12 hibou httpd[12346]: 192.168.250.10 - - \
      [10/May/2003:11:13:11 +0200] "GET /images/logo.png" HTTP/1.1 200 1201
    May 10 11:13:12 hibou httpd[12348]: 192.168.250.10 - - \
      [10/May/2003:11:13:11 +0200] "GET /images/corner.png" HTTP/1.1 200 1021

Remember that the other layer is a syslog log file and could contains other things than only the web server's requests. The first line in the example isn't a request record but really what usually ends up in the “error_log” and is a message about the server starting.

Prev | Up | Next
Chapter 2. Writing a New DLF Converter | Home | Creating the DLF Converter Skeleton