Solved

Apache weblog status %>s issue

Posted on 2010-09-05
11
351 Views
Last Modified: 2012-05-10
Hi,

Our Apache web server has been configured so the web logs capture the last status by using the directive %>s however this is producing the following in the log file ???>???s instead of the last correct status number.

Does anyone know why this occurs and how it can be fixed?

Thanks.
0
Comment
Question by:bcrawley01
  • 6
  • 5
11 Comments
 
LVL 40

Expert Comment

by:Richard Quadling
ID: 33611402
Can you show your entire LogFormat please?
0
 

Author Comment

by:bcrawley01
ID: 33614034
LogFormat "%h %v %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{Cookie}i\""
0
 
LVL 40

Expert Comment

by:Richard Quadling
ID: 33614276
Can you try %s to make sure that at least this is working? The original status will be logged rather than the last status.

Can you do a hex dump of the log file to see exactly what is ???>???s is.

Hmmm.

OOI, Can you try looking at the file containing this logformat in hex mode?

Have you used 16bit UTF format?

25 00 3E 00 73 for the %>s but as %\000>\000s in 8bit mode.

Almost certain this is the issue.

If you view the log file in hex mode, you should probably see that the ??? is really 00 - a null.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:bcrawley01
ID: 33614394
%s does work and is logging the original status.

When opening the log file in hex, ???>???s is 3F 3F 3F 3E 3F 3F 3F 73
0
 
LVL 40

Expert Comment

by:Richard Quadling
ID: 33614405
Hmm. That's odd.

Really was expecting that to be the tool that displayed the log showing NULLs as ???

Can you put the > back into the log format and do a hex on that.
0
 

Author Comment

by:bcrawley01
ID: 33614472
That before was with the > added.
0
 
LVL 40

Expert Comment

by:Richard Quadling
ID: 33615779
Yes. But I'm wondering if the editing of the logformat is the issue. Can you show the hex of the file with the logformat in it, not the log file itself.

Whilst it is not likely, but if the logformat is corrupted with nulls (16bit UTF rather than 8bit), then the leading null bytes _COULD_ be shown as ??? and depending upon how the translation is done from logformat to log file, ...

Sort of clutching at straws...

Can you attach the file with the logformat to this question?

0
 

Author Comment

by:bcrawley01
ID: 33623547
Log format file is attached.
server.xml
0
 
LVL 40

Expert Comment

by:Richard Quadling
ID: 33624494
As the file is XML, I wonder if %> is getting in the way somehow.

Is the remainder of the log entry exist?
0
 

Accepted Solution

by:
bcrawley01 earned 0 total points
ID: 33697842
0
 
LVL 40

Expert Comment

by:Richard Quadling
ID: 33699293
So, \" => " was the issue?

Ha! A million ways to escape and URLencoding never occurred to me.


0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are running a LAMP infrastructure, this little code snippet is very helpful if you are serving lots of HTML, JavaScript and CSS-related information. The mod_deflate module, which is part of the Apache 2.2 application, provides the DEFLATE…
In Solr 4.0 it is possible to atomically (or partially) update individual fields in a document. This article will show the operations possible for atomic updating as well as setting up your Solr instance to be able to perform the actions. One major …
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question