[logs] Re: Time precision on apache web logs

stephane.nasdrovisky@private

Carla Teixeira Lopes wrote:

> I'm analyzing apache web logs in a web site that has many hits per
> second and I would like to have a log format with at least millisecond
> precision. I have a specific log format with %t that generates a
> timestamp as 31/May/2005:15:45:08 +0100, but I would like more
> precision. Does anyone know if this is possible?

http://httpd.apache.org/docs-2.1/logs.html says:
LogFormat "%h %l %u %t \"%r\" %>s %b" common

[10/Oct/2000:13:55:36 -0700] (%t) The time that the request was received.
It is possible to have the time displayed in another format by 
specifying %{format}t in the log format string, where format is as in 
strftime(3) from the C standard library.

http://unixhelp.ed.ac.uk/CGI/man-cgi?strftime says:

POSIX.2 describes under date(1) several extensions that could apply to 
strftime as well
%+ The date and time in date(1) format. (TZ)

http://unixhelp.ed.ac.uk/CGI/man-cgi?date says:

%N nanoseconds (000000000..999999999)

What about:

LogFormat "%h %l %u %{%+ %N}t \"%r\" %>s %b" common

if %N is supported by strfftime & apache, you'll get an awfull 
nanosecond precision.

_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis