LogFormat as you deifned it is valid and it works with the log file sample you provided in your post.
If you get 947 corrupted records, then you must have 947 records in a different format in your log file or you have a second different LogFormat definition in your AWStats config file.
LogFormat in your AWStats config file has another value than the one you indicated in your first post. Use the LogFormat definition as in your first post and it will work.
The DirData directory must be empty when performing these tests. Move all files already in DirData to another temporary directory if needed.
As I said above, LogFormat in your AWStats config file ( awstats.www.newstar.vn.conf ) is not valid. You need to correct it as I pointed out in my previous message.
Here is what I get with your log file and your AWStats config file:
[internetofficer ~/public_html/cgi-bin/newstar]$ ./awstats.pl -update -config=www.newstar.vn Create/Update database for config "./awstats.www.newstar.vn.conf" by AWStats version 6.9 (build 1.914) From data in log file "thaingt_log.txt"… Phase 1 : First bypass old records, searching new record… Searching new records from beginning of log file… Phase 2 : Now process new records (Flush history on disk after 20000 hosts)… Jumped lines in file: 0 Parsed lines in file: 11112 Found 1 dropped records, Found 3 corrupted records, Found 0 old records, Found 11108 new qualified records. [internetofficer ~/public_html/cgi-bin/newstar]$
Your copy of AWStats could be corrupted. You can download the latest version from the AWStats page at SourceForge.