Skip to content

apache2-logs parser fails on exotic case of (combined) log #1764

@Korenchkin

Description

@Korenchkin

i have some old(really old) programs that query some debian 11 (also almost old) apache2,so not sure if it is relevant in newer versions,but sometimes apache generates slightly different log at "%u" (3rd parameter i believe),not sure if program sends empty username?,but i'm getting it from small % of ips(small chunk of ips out of small chunk quering api),but here are log lines:

1.2.3.4 - - [12/Apr/2026:14:50:12 +0200] "GET urlxxx HTTP/1.1" 200 742 "-" "Mozilla/3.0 (compatible; Indy Library)"
1.2.3.4 - "" [12/Apr/2026:18:22:20 +0200] "GET urlyyy HTTP/1.1" 200 1334 "-" "Mozilla/3.0 (compatible; Indy Library)"

notice 3rd param "" instead of -
(that would be "COMMONAPACHELOG" part of parser i believe)
finally i forced - to both 2nd and 3rd parameter in apache log settings,so workaround is pretty easy,i don't use apache login,so no need for username for me

not sure how common this is,so probably a small inconvenience only...

Apache/2.4.66 (Debian) OpenSSL/1.1.1w

thanks

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions