Analog has ALIAS commands that allow you to have it treat any pattern of
data as a different pattern. This is probably the easiest way to make
categories. There are two types of aliases -- those that work at the
data level and affect all reports, effectively grouping multiple items
together. Aliases that work at the report level only affect the display
of individual lines in the report.
A data level alias would be something like
FILEALIAS /dog.html Animals
FILEALIAS /cat.html Animals
FILEALIAS /giraffe.html Animals
This would cause all request reports to include a single line combining
all those items together:
reqs | file
-----+------------
32 | Animals
Note that these data-level alias commands are intended to rename data
into the same type of data. So converting "/dog.html" to "Animals" can
have far-reaching affects on other reports. For example, these request
won't be properly counted in the Directory Report because they have no
directory information (no leading "/"). They will not be counted in the
File Type Report because they are no extension. And they won't count as
"Pages" because they don't match one of the page patterns (which are
configurable and you could make a special case for this one). It might
be better to preserve that information by using an alias that looks more
like a request to analog:
FILEALIAS /dog.html /Animals.html?dog
...
ARGSINCLUDE /Anaimals.html
Using the query string to include the original information (and then
telling analog to look at the arguments on this file) allows you to see
the break down in your categories in the Request Report as well:
reqs | file
-----+------------
32 | /Animals.html
14 | /Animals?dog
10 | /Animals?cat
8 | /Animals?giraffe
For more information on the *ALIAS commands see
http://analog.cx/docs/alias.html. See
http://analog.cx/docs/args.html#ARGSINCLUDE for the ARGSINCLUDE command.
--
Jeremy Wadsack
Seven Simple Machines
Fritz Schantz wrote:
Hi all
I don't even qualify as a newbie, as I have not installed Analog yet.
I am looking for an alternative to webtrends firewall suite 4.1c,
which will no longer be compatible with our Symantec Enterprise
firewall when we upgrade it to version 8. Everthing I've read so far
makes Analog seem like a no-brainer. I have not yet seen in my
readings whether catagorizing can be done for outbound activity. That
is my concern - is catagorization possible in Analog?
Thanks! (And if I'm looking for this answer in the wrong place, I'm
sure you will point me in the right direction)
Fritz Schantz
Webmaster/Graphic Designer
Maryland Office of the Attorney General
200 St. Paul Place
Baltimore, MD 21202
410-576-6580
FAX 410-576-6434
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
