Hi Bruno, For the future, can you configure the webserver to resolve the IP to the hostname at the time it writes the entry to the log? If your server is near peak load, this may be expensive. I am not sure IIS can be configured this way.
For historical logs, analog cannot deal with the time varying association - so you must preprocess, as Jeremy points out. Adrian Adrian Dolling, Systems Consultant Public Library Services Branch Ministry of Community, Aboriginal and Women's Services PO Box 9490 Stn Prov Govt (mailing address) Victoria BC V8W 9N7 800 Johnson St, Victoria, BC (street address) mailto:[EMAIL PROTECTED] (New EMail December 2002) www.mcaws.gov.bc.ca/LGD/public_libraries/ Tel 250-387-4043 or 1-800-663-7051 FAX 250-953-3225 -----Original Message----- From: Jeremy Wadsack [mailto:[EMAIL PROTECTED] Sent: June 5, 2003 9:34 AM To: [EMAIL PROTECTED] Subject: Re: [analog-help] analog on an intranet with dhcp Bruno Adamo ([EMAIL PROTECTED]; Thursday, June 05, 2003 12:52 AM): > Hi everybody > I am currently trying to exploit our IIS server logs to get manageable > usage reports of the company intranet : analog looks like just the > right tool to do this! but the catch is, I have been asked to identify > each user by his computer host name. I thus have to use some kinf of > DNS lookup to convert the IP address contained in the log files into a > host name. Unfortunately, we are using DHCP assigned IPs, so the > relationship between an IP and a host name is kind of time-dependent. > I have access to a log file which traces the IP changes of every > connected host, it looks like : > <hostname>;<IP>;04/02/02 19:29:36 > <hostname>;<IP>;04/02/02 19:30:48 > <hostname>;<IP>;04/03/02 11:28:59 > etc... > I was wondering if there was a way to use this as a kind of dns cache > file, maybe by converting the date/time into a timestamp? anyway, I > need to resolve the IPs in my IIS log to the host that was using it at > that time, so I would really apreciate it if someone could tell me > wether I have any chance of success using this DHCP log with analog, > or if I should try to find another piece of software which would make > my life easier :-) thanks a lot for any suggestions Well, I think the best bet is just to pre-process and rewrite your log files using the hostnames in place of the IP addresses. That way they are stored permanently in the data. Doing the lookup and rewrite could be very simple with a script (perl, vbscript, ...). -- Jeremy Wadsack Wadsack-Allen Digital Group +----------------------------------------------------------------------- +- | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +----------------------------------------------------------------------- +- +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
