With this configuration and an empty log file as well as one with correct log line entries (touch an empty one or use any recent combined Apache CLF file you want!) analog produces --- sorry --- total bullshit:
there are some hits displayed together with browser informations for December 1999 and January 2000, which were never recorded. They exist only in analogs "fantasy". Analog is a really fine webserver (and proxy) log analyzing tool and I never observed this effect before (I used 5.03, 5.10 and every version of 5.2x so far). Only minor adaptations on the configuration were made by me since then, and you will note, that analog displays not even a warning about the attached configuration (safe for switching off internal search word report, if not present). Despite I could igore these non-existing hits due to their low number, they ruin the log time interval for me, which is more recent than this mick (that is the way it really became obvious for me of course). Registered Linux-User #169380 on http://counter.li.org/
# Here is a big configuration file for analog version 5.01 # <http://www.analog.cx/> # # It contains most commands which you can use # (or at least one example from each family of commands). # See bigbyrep.cfg for a similar file arranged by report instead of by family # of command. # # Actually this file doesn't really do much except show you what's available, # because it gives almost all the commands their default values. # (As of time of writing -- I don't promise it will stay up-to-date.) # # Even this file doesn't contain all the commands -- you'll have to read the # docs for the full set! # # First the commands you are most likely to want to change. # # If you need a LOGFORMAT command it must go here, above the LOGFILE commands. # LOGFORMAT MICROSOFT-NA # The logfile(s) to be analysed LOGFILE logfile.log # LOGFILE /old/logs/access_log.* # # Your organisation's name and URL for the top line of the report HOSTNAME "Shuttle Stuttgart" HOSTURL http://www.lb.shuttle.de/apastron # # Where to write the report OUTFILE Report.html # # URL for the images directory IMAGEDIR images/ # # Whether to use PNG or GIF images PNGIMAGES OFF # # URL and local directory for the pie charts # CHARTDIR /images/ # LOCALCHARTDIR /usr/local/apache/htdocs/images/ # # Style sheet for the output page STYLESHEET none # # Web server fetches /dir/index.html when asked for /dir/ DIRSUFFIX index.htm # # Case sensitive or case insensitive file system: default depends on your OS. # If your web server and your analog run on different OS's, you may need to # change this according to the machine running your server. # CASE INSENSITIVE # USERCASE SENSITIVE # # How to uncompress compressed logfiles # UNCOMPRESS *.gz,*.Z "gzip -cd" # Cache files: see docs/cache.html CACHEFILE none CACHEOUTFILE none # show the bigger sub items of M$ Windoze seperately: OSCHARTEXPAND Windows # now show the different M$IE monopoly tools: #SUBBROW MSIE/* SUBBROW */* BROWCHARTEXPAND MSIE # Aliases: see docs/alias.html # I can't list all of them, but there are aliases for individual items, e.g. # FILEALIAS /football/* /soccer/* # and there are also aliases for each report, e.g. # REQALIAS /soccer/* "Football: /soccer/*" # You can also use regular expressions: # FILEALIAS REGEXP:^/(football|soccer)/(.*) /$2 BROWOUTPUTALIAS "Mozilla (compatible)" "Netscape (compatible)" BROWOUTPUTALIAS IWENG AOL TYPEOUTPUTALIAS .html ".html [Hypertext Markup Language]" TYPEOUTPUTALIAS .htm ".htm [Hypertext Markup Language]" TYPEOUTPUTALIAS .shtml ".shtml [Server-parsed HTML]" TYPEOUTPUTALIAS .ps ".ps [PostScript]" TYPEOUTPUTALIAS .gz ".gz [Gzip compressed files]" TYPEOUTPUTALIAS .tar.gz ".tar.gz [Compressed archives]" TYPEOUTPUTALIAS .jpg ".jpg [JPEG graphics]" TYPEOUTPUTALIAS .jpeg ".jpeg [JPEG graphics]" TYPEOUTPUTALIAS .gif ".gif [GIF graphics]" TYPEOUTPUTALIAS .png ".png [PNG graphics]" TYPEOUTPUTALIAS .txt ".txt [Plain text]" TYPEOUTPUTALIAS .cgi ".cgi [CGI scripts]" TYPEOUTPUTALIAS .pl ".pl [Perl scripts]" TYPEOUTPUTALIAS .css ".css [Cascading Style Sheets]" TYPEOUTPUTALIAS .class ".class [Java class files]" TYPEOUTPUTALIAS .pdf ".pdf [Adobe Portable Document Format]" TYPEOUTPUTALIAS .zip ".zip [Zip archives]" TYPEOUTPUTALIAS .hqx ".hqx [Macintosh archives]" TYPEOUTPUTALIAS .exe ".exe [Executables]" TYPEOUTPUTALIAS .wav ".wav [WAV sound files]" TYPEOUTPUTALIAS .avi ".avi [AVI movies]" TYPEOUTPUTALIAS .arc ".arc [Compressed archives]" TYPEOUTPUTALIAS .mid ".mid [MIDI sound files]" TYPEOUTPUTALIAS .mp3 ".mp3 [MP3 sound files]" TYPEOUTPUTALIAS .doc ".doc [Microsoft Word document]" TYPEOUTPUTALIAS .rtf ".rtf [Rich Text Format]" TYPEOUTPUTALIAS .mov ".mov [Quick Time movie]" TYPEOUTPUTALIAS .mpg ".mpg [MPEG movie]" TYPEOUTPUTALIAS .mpeg ".mpeg [MPEG movie]" TYPEOUTPUTALIAS .asp ".asp [Active Server Pages]" TYPEOUTPUTALIAS .jsp ".jsp [Java Server Pages]" TYPEOUTPUTALIAS .cfm ".cfm [Cold Fusion]" TYPEOUTPUTALIAS .php ".php [PHP]" TYPEOUTPUTALIAS .js ".js [JavaScript code]" # Inclusions and exclusions: see docs/include.html # Again there are these for individual items, e.g. # FILEINCLUDE /football/* # FILEEXCLUDE /football/* # and for each report, e.g. # REQINCLUDE pages # REQINCLUDE *.pdf # Or you can use regular expressions: # FILEINCLUDE REGEXP:^/(football|soccer) # You can make more things into pages with commands like # PAGEINCLUDE *.shtml # PAGEINCLUDE *.asp # PAGEINCLUDE *.jsp # PAGEINCLUDE *.cfm # PAGEINCLUDE *.pl # PAGEINCLUDE *.php # You can limit the dates analysed with FROM and/or TO: see docs/include.html # FROM 991001 # TO -00-00-01 # Controlling status codes: see docs/include.html # STATUSINCLUDE 200-299,304 # STATUSEXCLUDE 206 304ISSUCCESS ON # Which browsers count as robots in the Operating System Report ROBOTINCLUDE REGEXPI:robot ROBOTINCLUDE REGEXPI:spider ROBOTINCLUDE REGEXPI:crawler ROBOTINCLUDE Googlebot* ROBOTINCLUDE Infoseek* ROBOTINCLUDE Scooter* ROBOTINCLUDE Slurp* ROBOTINCLUDE Ultraseek* ROBOTINCLUDE Openfind* # Whether each report is wanted: see docs/output.html GENERAL ON YEARLY OFF QUARTERLY OFF MONTHLY ON DAILYREP OFF DAILYSUM ON WEEKLY OFF HOURLYREP OFF HOURLYSUM ON QUARTERREP OFF QUARTERSUM OFF FIVEREP OFF FIVESUM OFF DOMAIN ON ORGANISATION ON DIRECTORY ON FILETYPE ON REQUEST ON REDIR OFF FAILURE OFF SIZE ON PROCTIME OFF HOST OFF REDIRHOST OFF FAILHOST OFF REFERRER OFF REFSITE OFF REDIRREF OFF FAILREF OFF VHOST OFF REDIRVHOST OFF FAILVHOST OFF USER OFF REDIRUSER OFF FAILUSER OFF SEARCHQUERY OFF SEARCHWORD ON INTSEARCHQUERY ON INTSEARCHWORD OFF BROWSERREP ON BROWSERSUM ON OSREP ON STATUS ON # The columns in each report: see docs/timereps.html and docs/othreps.html TIMECOLS RP YEARCOLS RP QUARTERLYCOLS RP MONTHCOLS RP WEEKCOLS RP DAYREPCOLS RP DAYSUMCOLS RP HOURREPCOLS RP HOURSUMCOLS RP QUARTERREPCOLS RP QUARTERSUMCOLS RP FIVEREPCOLS RP FIVESUMCOLS RP DOMCOLS Rb ORGCOLS Rb HOSTCOLS Rb REDIRHOSTCOLS R FAILHOSTCOLS R DIRCOLS Rb TYPECOLS Rb REQCOLS RbD REDIRCOLS R FAILCOLS R REFCOLS R REFSITECOLS R REDIRREFCOLS R FAILREFCOLS R BROWREPCOLS R BROWSUMCOLS RP OSCOLS NRP SIZECOLS Rb PROCTIMECOLS R VHOSTCOLS Rb REDIRVHOSTCOLS R FAILVHOSTCOLS R USERCOLS Rb REDIRUSERCOLS R FAILUSERCOLS R SEARCHQUERYCOLS R SEARCHWORDCOLS R INTSEARCHQUERYCOLS R INTSEARCHWORDCOLS R STATUSCOLS R # How the graphs are plotted: see docs/timereps.html ALLGRAPH P YEARGRAPH P MONTHGRAPH P DAYREPGRAPH P DAYSUMGRAPH P HOURREPGRAPH P HOURSUMGRAPH P WEEKGRAPH P QUARTERREPGRAPH P QUARTERSUMGRAPH P FIVEREPGRAPH P FIVESUMGRAPH P # Whether the time reports run forwards or backwards: see docs/timereps.html ALLBACK OFF YEARBACK OFF QUARTERLYBACK OFF MONTHBACK OFF DAYREPBACK OFF HOURREPBACK OFF WEEKBACK OFF QUARTERREPBACK OFF FIVEREPBACK OFF # The number of rows to display in each time report: see docs/timereps.html YEARROWS 0 QUARTERLYROWS 0 MONTHROWS 0 WEEKROWS 0 FULLDAYROWS 42 FULLHOURROWS 72 QUARTERROWS 96 FIVEROWS 288 # The floors for each report: see docs/othreps.html and docs/hierreps.html REQFLOOR 20r REQARGSFLOOR 10r REDIRFLOOR -30r REDIRARGSFLOOR 10r FAILFLOOR -30r FAILARGSFLOOR 10r DOMFLOOR 0b SUBDOMFLOOR 0.5%b ORGFLOOR -20r SUBORGFLOOR 0.5%r DIRFLOOR 0.01%b SUBDIRFLOOR 0.01%b TYPEFLOOR 0.0%b SUBTYPEFLOOR 0.0%b HOSTFLOOR -50r REDIRHOSTFLOOR -20r FAILHOSTFLOOR -20r REFFLOOR 20r REFARGSFLOOR 10r REFSITEFLOOR -30r REFDIRFLOOR 50r REDIRREFFLOOR -30r REDIRREFARGSFLOOR 10r FAILREFFLOOR -30r FAILREFARGSFLOOR 10r BROWSUMFLOOR -20r SUBBROWFLOOR -20r BROWREPFLOOR -200r OSFLOOR 0r SUBOSFLOOR 0r VHOSTFLOOR -20b REDIRVHOSTFLOOR -20r FAILVHOSTFLOOR -20r USERFLOOR -50r REDIRUSERFLOOR -20r FAILUSERFLOOR -20r SEARCHQUERYFLOOR -300r SEARCHWORDFLOOR -5000r INTSEARCHQUERYFLOOR -500r INTSEARCHWORDFLOOR -500r STATUSFLOOR 0r # How each report is sorted: see docs/othreps.html and docs/hierreps.html REQSORTBY REQUESTS REDIRSORTBY REQUESTS FAILSORTBY REQUESTS DOMSORTBY BYTES ORGSORTBY REQUESTS DIRSORTBY BYTES TYPESORTBY BYTES HOSTSORTBY ALPHABETICAL REDIRHOSTSORTBY REQUESTS FAILHOSTSORTBY REQUESTS REFSORTBY REQUESTS REFSITESORTBY REQUESTS REDIRREFSORTBY REQUESTS FAILREFSORTBY REQUESTS BROWREPSORTBY REQUESTS BROWSUMSORTBY REQUESTS SUBBROWSORTBY REQUESTS OSSORTBY REQUESTS SUBOSSORTBY REQUESTS VHOSTSORTBY BYTES REDIRVHOSTSORTBY REQUESTS FAILVHOSTSORTBY REQUESTS USERSORTBY REQUESTS REDIRUSERSORTBY REQUESTS FAILUSERSORTBY REQUESTS SEARCHQUERYSORTBY REQUESTS SEARCHWORDSORTBY REQUESTS INTSEARCHQUERYSORTBY REQUESTS INTSEARCHWORDSORTBY REQUESTS STATUSSORTBY ALPHABETICAL # Whether and how pie charts are plotted: see docs/othreps.html REQCHART ON REDIRCHART ON FAILCHART ON TYPECHART ON SIZECHART ON PROCTIMECHART ON DIRCHART ON HOSTCHART ON REDIRHOSTCHART ON FAILHOSTCHART ON DOMCHART ON ORGCHART ON REFCHART ON REFSITECHART ON REDIRREFCHART ON FAILREFCHART ON BROWREPCHART ON BROWSUMCHART ON OSCHART ON VHOSTCHART ON REDIRVHOSTCHART ON FAILVHOSTCHART ON USERCHART ON REDIRUSERCHART ON FAILUSERCHART ON SEARCHQUERYCHART ON SEARCHWORDCHART ON INTSEARCHQUERYCHART ON INTSEARCHWORDCHART ON STATUSCHART ON # What to link to in the reports REQLINKINCLUDE pages REDIRLINKEXCLUDE * FAILLINKEXCLUDE * REFLINKINCLUDE * REDIRREFLINKINCLUDE * FAILREFLINKINCLUDE * # BASEURL http://my.server.com # Cosmetic commands: mostly in docs/output.html OUTPUT HTML LANGUAGE ENGLISH # LANGFILE uk.lng # DOMAINSFILE ukdom.tab # DESCFILE ukdesc.txt HEADERFILE none FOOTERFILE none LOGO analogo.gif REPORTORDER x1QmWDdHwh4657oZSlLujJkKfsNnBbpvRMcPztiEIYyr GENSUMLINES ALL GOTOS ON RUNTIME ON DESCRIPTIONS ON REPORTSPAN OFF REPORTSPANTHRESHOLD 60 WEEKBEGINSON SUNDAY LASTSEVEN ON MARKCHAR + # SEPCHAR and DECPOINT are usually taken from the language file # SEPCHAR , # DECPOINT . REPSEPCHAR none COMPSEP " " RAWBYTES OFF NOROBOTS ON SEARCHCHARCONVERT ON BARSTYLE b HTMLPAGEWIDTH 65 ASCIIPAGEWIDTH 76 MINGRAPHWIDTH 15 # The following commands are only available on some systems: see docs/dns.html # DNSFILE dnscache # DNSLOCKFILE dnslock # DNS NONE # DNSGOODHOURS 100000 # DNSBADHOURS 336 # DNSTIMEOUT 10 # Sub-item commands: see docs/hierreps.html. Examples are # SUBDOM *.com # SUBDIR /*/*/ SUBTYPE *.gz,*.Z # A list of search engines SEARCHENGINE http://*altavista.*/* q SEARCHENGINE http://*yahoo.*/* p SEARCHENGINE http://*google.*/* q SEARCHENGINE http://*lycos.*/* query SEARCHENGINE http://*aol.*/* query SEARCHENGINE http://*excite.*/* search SEARCHENGINE http://*go2net.*/* general SEARCHENGINE http://*metacrawler.*/* general SEARCHENGINE http://*msn.*/* MT SEARCHENGINE http://*hotbot.com/* MT SEARCHENGINE http://*netscape.*/* search SEARCHENGINE http://*looksmart.*/* key SEARCHENGINE http://*infoseek.*/* qt SEARCHENGINE http://*webcrawler.*/* search,searchText SEARCHENGINE http://*goto.*/* Keywords SEARCHENGINE http://*snap.*/* keyword SEARCHENGINE http://*dogpile.*/* q SEARCHENGINE http://*askjeeves.*/* ask SEARCHENGINE http://*ask.*/* ask SEARCHENGINE http://*aj.*/* ask SEARCHENGINE http://*directhit.*/* qry SEARCHENGINE http://*alltheweb.*/* q SEARCHENGINE http://*northernlight.*/* qr SEARCHENGINE http://*nlsearch.*/* qr SEARCHENGINE http://*dmoz.*/* search SEARCHENGINE http://*newhoo.*/* search SEARCHENGINE http://*netfind.*/* query,search,s SEARCHENGINE http://*/netfind* query SEARCHENGINE http://*/pursuit query SEARCHENGINE http://*wisenut.com/* q SEARCHENGINE http://*openfind* q SEARCHENGINE http://*teoma* t # Search engines on your own site # INTSEARCHENGINE /cgi-bin/my.cgi q INTSEARCHENGINE /~su1000/cgi-bin/search.cgi key # Use one of these if you are short of memory: see docs/lowmem.html FILELOWMEM 0 HOSTLOWMEM 0 BROWLOWMEM 0 REFLOWMEM 0 USERLOWMEM 0 VHOSTLOWMEM 0 # Commands for debugging SETTINGS OFF DEBUG OFF WARNINGS ON PROGRESSFREQ 0 # ERRFILE somefile ERRLINELENGTH 78 # # By Stephen Turner 1999 - 2001. No warranty for this file. # This file is given into the public domain: it may be used, modified and # redistributed without restriction.
