[Bug 908901] [NEW] awstats confused by 408 entries in apache log files

[James Troup]

Public bug reported:

We have a mostly idle (historical) site that we still run awstats
over.  These days, for reasons I've yet to derermine, it generates a
lot of 408 responses, e.g.:

| 91.189.88.12 - - [01/Dec/2011:12:54:56 +0000] "-" 408 4808 "-" "-"

If enough of these are at the start of the logfile, awstats chokes on
the file:

| AWStats did not find any valid log lines that match your LogFormat parameter, in the 50th first non commented lines read of your log.
| Your log file /usr/share/doc/awstats/examples/logresolvemerge.pl /srv/webstats.canonical.com/logs/SERVER_NAME/SITE_NAME* | must have a bad format or LogFormat parameter setup does not match this format.
| Your AWStats LogFormat parameter is:
| 1
| This means each line in your web server log file need to have "combined log format" like this:
| 111.22.33.44 - - [10/Jan/2001:02:14:14 +0200] "GET / HTTP/1.1" 200 1234 "http://www.fromserver.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
| And this is an example of records AWStats found in your log file (the record number 50 in your log):
| 91.189.88.12 - - [01/Dec/2011:13:10:24 +0000] "-" 408 4808 "-" "-"
| Setup ('/etc/awstats/awstats.SITE_NAME.conf' file, web server or permissions) may be wrong.
| Check config file, permissions and AWStats documentation (in 'docs' directory).

We're using LogFormat=1 and AFAIK the line quoted is valid combined
log format data.

** Affects: awstats (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to awstats in Ubuntu.
https://bugs.launchpad.net/bugs/908901

Title:
  awstats confused by 408 entries in apache log files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/awstats/+bug/908901/+subscriptions