John Ringloff wrote:
> What I don't know how to do (elegantly,) is differentiate between
> servers on a entry by entry basis, as it is a common file space, and
> there is no identifying information about which server each entry
> came from.
There is in your logfile names:
>LOGFILE /dfs/os/unix/hosts/art/logs/apache-SSL/access_log.20000501.gz
>LOGFILE /dfs/os/unix/hosts/bus/logs/apache-SSL/access_log.20000501.gz
I assume the directory after hosts is the originating server. Since Analog doesn't
really do anything with this data (although I suppose you could hijack the Virtual
Host report into something like a Servers report), you could just use the names to
differentiate host-specific reports, much like you are doing with dates.
> I have thought about modifying the Apache log format to do
> this, but that is work, and for me this is a pet project, not a real
> one.
Running the stats for a 20-server web farm is a pet project? What's you're real
job like? :)
Anyway, it's fairly easy with Apache Custom Logformat commands to add a server
identifier to the logfile entries. You can then use Analog to process this into a
vitual host report by asigning it the %v field in the format. Alternately, you
could append a 'vitural host' URL to each LOGFILE entry in log confs and use
'virtual host' features that way.
> My next pet project in this respect is to do something about host
> lookups, they take forever. I would like to just skip 'em but I have
> a feeling the users want them. I should also probably move up to the
> current version of Analog.
Try a third party lookup tool. DSNtran is very fast, especially on Linux. If all
your servers are Sun (which is slow at DNS lookup), you might want to throw
together a Linux box just to do lookups, with it's own nameserver and a short
cycle for rechecks.
HTH,
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
