Token '[02/Nov/2023' doesn't match specifier '%d'

[pmetras]

Token '[02/Nov/2023' doesn't match specifier '%d'

[allinurl]

Please try:

goaccess access.log --log-format='%^ %v %h %^[%x] "%r" %s %b "%R" "%u" %^' --datetime-format='%d/%b/%Y:%H:%M:%S %z'

[pmetras]

Your log-format and datetime-format work from the command line. If I put these formats in my configuration file, it does not work.

I tried with a minimal configuration file:

#time-format %H:%M:%S
#date-format %d/%b/%Y
datetime-format %d/%b/%Y:%H:%M:%S %z
log-format %^ %v %h %^[%x] "%r" %s %b "%R" "%u" %^

It works, but as soon as I uncomment the time-format specification, goaccess does not recognize the log format.

And if I uncomment both lines, time-format and date-format, I get the following format error:

goaccess -p ./goaccess.conf2 ./access-a.log.1
Cleaning up resources...
==4486== GoAccess - version 1.8.1 - Nov  1 2023 00:19:32
==4486== Config file: ./goaccess.conf2
==4486== https://goaccess.io - <[email protected]>
==4486== Released under the MIT License.
==4486==
==4486== FILE: ./access-a.log.1
==4486== Parsed 10 lines producing the following errors:
==4486==
==4486== Token '02/Nov/2023:00:00:11 +0000' doesn't match specifier '%x'
==4486== Token '02/Nov/2023:00:00:14 +0000' doesn't match specifier '%x'
...

I'm using a configuration file as I set many options and don't want to enter them on the command line. But the following line also shows the error: goaccess access-a.log.1 --log-format='%^ %v %h %^[%x] "%r" %s %b "%R" "%u" %^' --datetime-format='%d/%b/%Y:%H:%M:%S %z' --time-format='%H:%M:%S' --date-format='%d/%b/%Y'

[allinurl]

I will have to verify this, but you can always:

log-format %^ %v %h %^[%d:%t %^] "%r" %s %b "%R" "%u" %^
date-format %d/%b/%Y
time-format %T

[pmetras]

I continued tests to be sure that goaccess recognize all the fields in our log format. This works:

goaccess access-a.log.1 --log-format='FORWARD: %v ~h{, } - %e-%^[%d:%t %^] "%r" %s %b "%R" "%u" %^' --datetime-format='%d/%b/%Y:%H:%M:%S %z' --time-format='%H:%M:%S' --date-format='%d/%b/%Y'

This does not work:

goaccess access-a.log.1 --log-format='FORWARD: %v ~h{, } - %e- [%d:%t %^] "%r" %s %b "%R" "%u" %^' --datetime-format='%d/%b/%Y:%H:%M:%S %z' --time-format='%H:%M:%S' --date-format='%d/%b/%Y'

The difference is ...%e-%^[%d... instead of ...%e- [%d....

[allinurl]

Happy to hear it works for you. For me, the one I posted works fine:

[allinurl]

This is now closed - feel free to reopen it if necessary.