Does your Domain report or Organization report indicate that one or more
significant sources of traffic have disappeared altogether? If so, it
may indicate a routing or DNS problem. (Has the DNS address of the
server changed? If it's not handled properly, propagation of DNS changes
can take days).
I also note that you refer to "a factor of 15 fewer successful requests"
reported - forget about "successful requests" - what's the total number
of hits in the log file? Give that you've changed servers, it's possible
that you are seeing entries that Analog considers corrupt for some
reason, and it may simply require a tweak of the LOGFORMAT.
(I wouldn't even be looking at Analog in a situation like this - I'd
simply be eye-balling the size of the logfiles, based on what size I'd
expect them to be from before the change - if they're 1/15th the size
you'd expect, start redoing everything from scratch - if they're about
the size you'd expect, start rebuilding Analog from scratch!).
Aengus
______________________________ Reply Separator _________________________________
Subject: RE: [analog-help] logrotate problem?
Author: [EMAIL PROTECTED] at Internet
Date: 8/8/00 4:01 PM
Jeremy,
Thanks for all the tips. There were no indicators in the error logs. The
split logs results were similar to the results obtained from analog reports
from our ISP, so I'm not sure that that's the problem. My boss said to go
backwards and redo everything. Oh boy, here we go again ... Will keep you
posted.
Thanks for your help thus far.
Geraldine Golveo
-----Original Message-----
From: Jeremy Wadsack [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 08, 2000 12:00 PM
To: [EMAIL PROTECTED]
Subject: Re: [analog-help] logrotate problem?
Geraldine Golveo wrote:
> I don't think so. By "factor of 15", I mean there are 15 times fewer
> successful requests reported.
Oops. That's what I get fopr cursory reading. :)
> Also, the reports I run take the day's range from 00:00 to 23:59 hours, so
the
> time that the requests take place shouldn't factor in the discrepancy.
So you are missing the last 15 minutes of every day, but that shouldn't make
that big of a difference.
> Could it be that we changed the cron to run at 11:45 pm rather than at 4
am,
> or that I changed logrotate config to run daily rather than weekly?
Daily rather than weekly seems more likely, but still I would think the
reports
would be smaller by a factor of 7 or so. Unless you are comparing a low
traffic
day (say Sunday) to the entire week's report for before. Or maybe because
it's
only getting one set of server logs (not two) for one day of the week (not
the
full week).
I'm speculating here, because there are a lot of variables that could change
(that's what you get for changing everything at once :). Have you looked for
any
error messages? Are you getting a lot of corrupt lines or unwanted lines
that
you weren't getting before? Is it possible that previously, with split logs,
you
were inadvertently duplicating results to increase to a factor of 15?
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/
------------------------------------------------------------------------
