Do not log requested from certain IP's to Apache logs

That would be handy if you dont mind

I'm on a windows server if that makes a difference

regards
neil

hmm yes that makes a difference as I was going to write a bash script. Is your apache server on Windows too? If so might need a batch file to do the job instead.

yes, were fully windows im afraid  Win 2003 / apache 2.2. / php5 / mysql

Ok neil, Ill create you a batch file, what ill need you to do is tell me the full path to the log file and the name of the log file.

ALso once created you will need to obviously add this batch file to your scheduler so it runs every x amount of times.

Reagrds

Lee

also if you have a list of ip addresses you want removing....give me those too

91.111.74.67
10.2.1.1

regards
neil

path to log file....

D:\logs\apache\shep

and the log file is called shep ? or is it access_log ?

They all start access.log. but then all have different numbers after them, example:
access.log.1251244800
access.log.1251158400

Hi Neil! Sorry boss has been kicking my arse with a bit of work....

Anyway to do this really simply and to remove the whole line containing said IP create a file called log.bat in the log folder and put the below into it. That will look for the two ip addresses from all access_log.* files.

To test it, make a seperate folder, copy some access logs in there, put this batch file in there and run it, then look through the access logs.....worked on my machine with test log files. hope this helps!

@echo off
for /f %%a IN ('dir /b access_log.*') do type %%a|findstr /v "91.111.74.67">%%a.tmp|copy %%a.tmp %%a|del %%a.tmp
for /f %%a IN ('dir /b access_log.*') do type %%a|findstr /v "10.2.1.1">%%a.tmp|copy %%a.tmp %%a|del %%a.tmp
                                              

1:
2:
3:

Then use scheduler to run it daily/hourly/minutely etc!

Tried the code above but getting this:

D:\logs\apache\sdc-test>remove-internal-ips.bat
D:\logs\apache\sdc-test\access.log.1250812800.tmp
The process cannot access the file because it is being used by another process.
D:\logs\apache\sdc-test\access.log.1250899200.tmp
The process cannot access the file because it is being used by another process.
D:\logs\apache\sdc-test\access.log.1251158400.tmp
The process cannot access the file because it is being used by another process.
D:\logs\apache\sdc-test\access.log.1251244800.tmp
The process cannot access the file because it is being used by another process.
D:\logs\apache\sdc-test\access.log.1250812800.tmp
The process cannot access the file because it is being used by another process.
The system cannot find the file specified.
D:\logs\apache\sdc-test\access.log.1251158400.tmp
The process cannot access the file because it is being used by another process.
D:\logs\apache\sdc-test\access.log.1251244800.tmp
The process cannot access the file because it is being used by another process.

D:\logs\apache\sdc-test>

Regards
Neil

remove the line that says @echo off and then paste to me, so i can see where its getting stuck

attached along with cmd prompt screen shot

did you remove the echo off statement? As the above does not show clearly where it is getting stuck...

let me see if i can add a delay into the mix as your processor might be so quick that it is trying to copy the file before closing it....one second

yes echo off

Ok we are going to add a delay into the mix to see if this helps.....without the use of the command sleep which, we will have to delay using "ping"

So put in new log files and remove the .tmp files and run this batch file and let me know..

@echo off
for /f %%a IN ('dir /b access_log.*') do type %%a|findstr /v "91.111.74.67">%%a.tmp|ping 127.0.0.1 -n 3 -w 1000>nul|copy %%a.tmp %%a|del %%a.tmp
for /f %%a IN ('dir /b access_log.*') do type %%a|findstr /v "10.2.1.1">%%a.tmp|ping 127.0.0.1 -n 3 -w 1000>nul|copy %%a.tmp %%a|del %%a.tmp
                                              

1:
2:
3:

still the same.

Each log is about 40MB so I'm not sure if that is the problem

Any chance I can grab a log file from you so I can test as all my logs are tiny! Is there somewhere you can put it that i can download? My email is lee@silvertec.co.uk if your able to find a place to put it.

emailed link, regards
Neil