Re: [Summary-Talk] server detection

[Jason Linhart <jason@xxxxxxxxxxx>]

s-ip is one of the fields that will get interpreted as a domain name, 
although in this particular format cs-host will be used in preference. 
S-COMPUTERNAME would get used as the server name, if it was present, but 
that field is not included in this log format.

You could write a "User log format definition" to force s-ip to be used 
as a server name if you want.

Jason


On 9/19/03 8:51 PM Cameron Knowlton (cameronk@igods.com) wrote:

>I have a log formatted as below, but for some reason, I can't detect the 
>server (as per the Server report D7). Should s-ip be getting interpreted?
>
>All that shows up for Server is: (Unknown)
>
>#Software: Microsoft Internet Information Services 5.0
>#Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem 
>cs-uri-query sc-status sc-win32-status sc-bytes cs-bytes time-taken 
>cs-version cs-host cs(User-Agent) cs(Cookie) cs(Referer)

-----------------
Jason@Summary.Net
-----------------
Dr. Seuss books . . . can be read and enjoyed on several levels. For
example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
as a searing indictment of the narrow-minded binary counting system.
  -- Peter van der Linden, Expert C Programming, Deep C Secrets
-------------
Go to <http://summary.net/list.html> to update subscription info.