On Sunday 06 May 2001 10:42 pm, you wrote:
> ====
> I agree that UNIQUEIP[{hour}|{day}|{week}|{month}] would be a good
> enhancement. My question is whether it is worth the major change to
> an already very efficient program? You can achieve the same results
> using a Perl script or a UNIX shell script that entails cut, sort,
> grep and wc.
You have 2 _BIG_ disadvanteges whn you use scripts (bash,perl, etc.) to
break a big log in small chunks and analyze the small files obtained and then
build up a result file from partial result files:
1. When you run your in house developed scripts you WRITE TO DISK the small
chunks obtained from the big log(s).
This means:
Instead Analog parses ONCE the big log file (READING) and produce one result
file you have to do this:
a) parse once the big log file (reading it)
b) you waste valuable DISK SPACE and TIME with WRITING the chunks
c) analog parses the small chunks
d) from the output files obtained you build up the result
Of course if you want all (UNIQUEIP/hour, UNIQUEIP/day, UNIQUEIP/week) you
have to repeat all those steps.
Now, which solution appear to be more reasonable for you???
2. When you run Analog on the chunks you obtain a result file (or more) for
each chunk.
You CANNOT use the integrated features of reporting user friendly results.
You have to build up a result file from the resulting chunk results.
Like that you crippled Analog. You cannot use nor INPUT neither OUPUT
features of Analog.
Again it's not about analyzing a 10 MB log. It's about analyzing 1 GB
logs/PER SITE/per month.
I do not want to give the wrong impression: I really apreciate the work what
has been done. You did very well since now. I find Analog a very, very good
tool for analyzing logs, but I lived with the impression that it will be
designed to be used not only by home users, but also by persons which REALLY
need a professional tool for log analyzing.
And if I got the wrong impresion, please excuse me.
with respect,
--
.....::: Calin Damian - Software Developer Matrix Works/ :::....
...:: 0040-222-8149; mobile 0040-932-51400; ICQ UIN 98228007 ..::...
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------
