On Wed, 29 May 2002, Aengus wrote: > While trying to track down some odd behaviour on one of my servers, I > happened to use ALL ON. Even though I don't have a User field defined on > that particular log file, I got a User report with the following header: > > "This report lists the users who requested files, if users have been > authenticated or can be identified by cookies" > > And sure enough, the report contains a bunch of "users" with > ASPSESSIONID and WEBTRENDS_ID cookies, but the most common one is > "language=fr;from0=par". > > I can't find any mention in the documentation about this, or any way to > control it. I know I can write a custom log format to do my own User > report based on a cookie, but I don't usually bother. But if Analog is > going to interpret the cookie field anyway, and I could just tell it > which part of the cookie field to use, I might make more use of this > feature. >
Yes, it treats the cookie as a user field if there isn't a proper user field. It has to be admitted that cookie parsing is... primitive because there isn't any understanding of cookies or sessions, it's just another text field. But you can use USERALIAS to pull out a bit you're particularly interested in. > And while I'm at it, the same log file has a lot of querystrings that > start with SessionID=<some number>. For some reason, I can't get Analog > to display any of these strings in the Request report. In fact, it looks > as though any query string that starts with <name>=<number> seems to be > ignored in the request report - that is the query string itself isn't > displayed, just the actual file request without a query string. I've set > the REQFLOOR to 1r, but it doesn't seem to make any difference. > You need REQARGSFLOOR 1r as well. -- Stephen Turner, Cambridge, UK http://homepage.ntlworld.com/adelie/stephen/ "This is Henman's 8th Wimbledon, and he's only lost 7 matches." BBC, 2/Jul/01 +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
