trying to parse default apache access and error logs, getting stuck on date time

Posted on Sep 2, 2026 at 12:36 PM

Hi, I'm trying to parse apache (httpd) logs, that have standard settings, but LogViewPlus seems to choke on the date formats, and I cannot really handle it well with a custom parser either.

I have two (admittedly both odd) datetime formats, matching https://httpd.apache.org/docs/2.4/logs.html
access log sample:

127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0" 200 2326

where the date/time field is [day/month/year:hour:minute:second zone]

and the error log sample:

[Fri Sep 09 10:42:29.902022 2011] [core:error] [pid 35708:tid 4328636416] [client 72.15.99.187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error


In particular it appears to choke on the three-letter month (i.e. Sep/Oct), despite matching what is specified on https://www.logviewplus.com/docs/date_specifier.html
This fails to work: %d{dd/MMM/yyyy:hh:mm:ss zzzz}
If I use the month as a string literal, it accepts the custom formatting string, but will reset the month to January.
%d{dd/Sep/yyyy:hh:mm:ss zzzz} - this sort of works.

LVP 3.2.9

Posted on Sep 2, 2026 at 5:50 PM

Hi Keli,

I am able to parse the first log entry with...

%S{IP} - %S{User} [%d{dd/MMM/yyyy:%H:mm:ss zzzz}] %m%n


And the second with...

[%d{ddd MMM dd %H:mm:ss.ffffff yyyy}] [core:%p] [%S{PID}] [%S{Client}] %m%n


Can you please see if either of those date formats work for you?

Thanks,

Toby

Please login or register to reply to this topic.

Login or Register