This kind of format (nginx servor log) seems to not support by ttail.
I get some huge anonymize log for test..
HOST - - [29/Sep/2015:19:52:02 +0200] "GET http://blabla HTTP/1.1" 200 4551 "-" "sfFeedReader/0.9"
This kind of format (nginx servor log) seems to not support by ttail.
I get some huge anonymize log for test..
There was 2 reason for autodetection not working problem :
the format “%d/%B/%Y:%H:%M:%S” is not in the list of format that ttail will try when autodetecting formats
there is a prefix before the date
I added the “%d/%B/%Y:%H:%M:%S” to the list of formats (in src/include/ttail.h ), but you will still have to give the -E -r prefix arguments !
Thank's for the comment.
In fact ttail was not able to autodetect nginx date format. But the programm should work using those options :
<pre>
ttail -Er "^[^\[]+\[" -f "%d/%B/%Y:%H:%M:%S" -d "#-1h" /path/to/logs/access.log
</pre>
There was 2 reason for autodetection not working problem :
- the format "%d/%B/%Y:%H:%M:%S" is not in the list of format that ttail will try when autodetecting formats
- there is a prefix before the date
I added the "%d/%B/%Y:%H:%M:%S" to the list of formats (in src/include/ttail.h ), but you will still have to give the -E -r prefix arguments !
HOST - - [29/Sep/2015:19:52:02 +0200] “GET http://blabla HTTP/1.1” 200 4551 “-” “sfFeedReader/0.9”
This kind of format (nginx servor log) seems to not support by ttail. I get some huge anonymize log for test..
Thank’s for the comment.
In fact ttail was not able to autodetect nginx date format. But the programm should work using those options :
There was 2 reason for autodetection not working problem :
I added the “%d/%B/%Y:%H:%M:%S” to the list of formats (in src/include/ttail.h ), but you will still have to give the -E -r prefix arguments !