On Monday, October 10, 2005 11:15 AM [EDT],
Chris Sharman <[EMAIL PROTECTED]> wrote:

> For something truly terrible I did in a past life, I now have stats
> from an IIS server to analyze.

This isn't really the right place for airing your religious views (an ad
hominem attack on a text file because of a visceral dislike of the operating
system it was created on borders on the ideological, rather than the
logical)

> Am I right in thinking that it's just telling me (warnings below) that
> neither bytes nor referrer are being logged by IIS ?

> #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
> cs-username c-ip cs(User-Agent) sc-status sc-substatussc-win32-st
> atus

Whoever configured this IIS server didn't configure it to log bytes or
referrer.

> Logfile lines without status code: 252 -- what are these ?

They're lines that don't have a Status code. (Analog creates 2 logformats
when it autoanalyzes a W3C log - one matches the #Fields line, and the other
is just (#%j), to handle the other 3 header lines. These lines obviously
don't have a %c field.

You have 84 sets of 4 header lines (336 in total), and 84 sets of 3 lines
that match (#%j), qhixh ia 252 lines without a status code.

> Unwanted logfile entries: 792 -- I thought these were unwanted dates ?

Unwanted lines are any lines that you have EXCLUDEd, or no INCLUDEd, or that
fall outside a specified FROM-TO period.

> I've got 336 lines beginning "#", all the rest begin "2005-10-0".
> I asked for (& got) all of October (so far).
>
> Does IIS log referrers separately ?

IIS logs what you tell it to log - all recent versions of IIS default to W3C
logs, which are fully user configurable to log whichever fields. All
selected fields are logged in a single file.

Aengus

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to