Stephen Turner <[EMAIL PROTECTED]> wrote:
> On Wed, 29 May 2002, Aengus wrote:
>
>> "This report lists the users who requested files, if users have been
>> authenticated or can be identified by cookies"
>>
>> And sure enough, the report contains a bunch of "users" with
>> ASPSESSIONID and WEBTRENDS_ID cookies, but the most common one is
>> "language=fr;from0=par".
...
>
> Yes, it treats the cookie as a user field if there isn't a proper user
> field.
>
> It has to be admitted that cookie parsing is... primitive because
> there isn't any understanding of cookies or sessions, it's just
> another text field. But you can use USERALIAS to pull out a bit
> you're particularly interested in.

Does it use the whole Cookie field as the User name? When I looked at
the report I got the impression that it was making a guess at which part
of the cookie field it should use, but if it's just treating the whole
cookie field as %u, then I'll try to play with some USERALIAS commands
to tidy up the output.

And you might want to mention this explicitly in the documentation. You
do hint that the cookie field can be used for %u, but I've only ever
done this before by creating a custom logformat. If all I have to do is
figure out an appropriate USERALIAS, I might pay more attention to this.

>> And while I'm at it, the same log file has a lot of querystrings that
>> start with SessionID=<some number>. For some reason, I can't get
>> Analog to display any of these strings in the Request report. In
>> fact, it looks as though any query string that starts with
>> <name>=<number> seems to be ignored in the request report - that is
>> the query string itself isn't displayed, just the actual file
>> request without a query string. I've set the REQFLOOR to 1r, but it
>> doesn't seem to make any difference.
>
> You need REQARGSFLOOR 1r as well.

Doh!

Talk about not seeing the forest for the trees!

Aengus

+------------------------------------------------------------------------
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|    http://www.mail-archive.com/[email protected]/
|    http://lists.isite.net/listgate/analog-help/archives/
|    http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------

Reply via email to