COMBINED2DLF.IN(1)

📦 version 2.1.1, in arch rolling

💖 COMBINED2DLF.IN(1) 💖

okay so bestie, welcome to the COMBINED2DLF.IN(1) page — yes that's the manual name, yes it's giving "my file extension is part of my identity", and yes we're gonna read it together. grab a snack. 🍓

✨ NAME ✨

combined2dlf — converts a combined log file into DLF. that's the whole vibe. one job, does it slay. 💅

🌸 SYNOPSIS 🌸

combined2dlf file

literally just hand it a file and let it cook.

🦋 DESCRIPTION 🦋

so combined2dlf takes your web server log files that are in the combined log format and converts them into the www DLF. glow-up complete. ✨

fun history moment: the combined format (also known as the extended common log format) was first implemented in the NSCA httpd webs server, but ngl it's supported in many web servers now — Apache can be configured to use that log format too. it ate and left no crumbs.

🎀 COMBINED LOG FORMAT 🎀

okay so the combined log format is an extension to the Common Log Format — peep common2dlf(1) for that one. what it does is add two fields to the end of the line:

"referer" "useragent"

not me getting emotional over two little quoted fields. 😭 let's meet them:

💜 referer

the content of the Referer request's header. this usually reflects the page where the user was before that request. detective work, honestly. 🔍

💜 useragent

the content of the User-Agent request's header. this usually reflects the browser that the user is using. identity reveal. 👑

⭐ log example :

127.0.01 - - [11/03/2001 12:12:01 -0400] "GET / HTTP/1.0" 200 513 "-" "Mozilla/5.0"
dsl1.myprovider.com - francis [11/03/2001 12:14:01 -0400] "GET /secret/ HTTP/1.0" 200 1256 "http://www.example.com/index.html" "Mozilla/5.0"

(yes those are copied exactly, character for character, don't come for me 🫶)

🌈 EXAMPLES 🌈

to process a log as produced in the combined logformat:

$ combined2dlf < combined.log

and honestly? combined2dlf will be rarely used on its own — it's more likely called by lr_log2report, because that's its main character energy:

$ lr_log2report combined < /var/log/httpd/combined.log

it's giving "I work best with my team". 🧚

🔥 SEE ALSO 🔥

the friend group. the squad. go say hi. 💖

👑 AUTHORS 👑

Joost van Baal <joostvb@logreport.org>, Francis J. Lacoste <flacoste@logreport.org> and Egon Willighagen <egonw@logreport.org>, based on an idea by Edwin Groothuis.

legends, all of them. 🙌

⭐ VERSION ⭐

$Id: combined2dlf.in,v 1.10 2006/07/23 13:16:36 vanbaal Exp $

keeping it exact, as always. 💅

Copyright (C) 2000, 2001 Stichting LogReport Foundation LogReport@LogReport.org

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

bestie please clock this: no warranty, fr fr. like, none. don't come crying to the authors if it doesn't do the thing. 🙈

You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with http://www.gnu.org/copyleft/gpl.html.

okay that's the whole page!! mwah!! 🫶💖✨

Lire 2.1.1 🦋 dated 2025-09-28 — and that's the sign-off, bestie. go convert some logs. periodt. 💅🎀🌸

📦 where this page comes from