empty search logs

[jscar]

I have one collection on a mini but cannot generate search logs for
it. I used to be able to and have a nice report for 07-08 data. When I
try to generate a log for Nov 08-09 all I get is the following on Nov
27th 2008 (theris nothing before or after that date)

78.86.86.191 - - [27/Nov/2008:12:13:22 +0000] "GET /search?
entqr=0&access=p&sort=date%3AD%3AL
%3Ad1&output=xml_no_dtd&ie=UTF-8&as_filetype=&btnG=Search+Eden
+DC&client=default_frontend&as_epq=&as_oq=&as_eq=&num=10&ud=1&site=default_collection
+alert
%28195581%29+&as_q=&oe=UTF-8&proxystylesheet=default_frontend&as_occt=any&ip=78.86.86.191&as_ft=i
HTTP/1.1" 200 1354 0 0.00

It has the site specifid but it has a strange string "+alert
%28195581%29+" after it. Is this breaking my search logs? If so can I
alter it at all?

tia

Julian

[brianb]

That is strange. It looks like someone is trying to use cross site
scripting or something. It is possible that it is breaking it but not
sure. Are you able to get any logs from other date ranges?

Brian

[jscar]

Thanks Brian, I think it is cross site scripting attempts but nothing
malicious - could either have been myself or our penetation testers.
The default xslt had a cross site scripting vulnerability and that
date coincides with some testing we were doing last year. I can't
generate any other logs for any time after that date and since the
mini only keeps logs for 1 year I can't try before.

Is there any way I can manually get to the logs in a text editor to
try and delete/edit that entry to see if it fixes the issue?

Julian