Joe <[EMAIL PROTECTED]> wrote: > Thanks for having a look. > > How about this webserver.log: > 2008-06-04 06:19:44 0.056 163.167.82.61 1zk4LGlY8Yzy5yflRTsT 200 GET > /webct/urw/lc61300502021.tp61300522021/courseFS.dowebct > tab=view&forward=studentCourseView.dowebct&lcid=61300502021 15348 > FIW0021:0:6
LOGFORMAT (%y-%m-%d%w%h:%n:%j%w%j%w%S%w%u%w%c%w%j%w%r%w%q%w%b%w%j) (The %w marks out white space - it makes the logformat hard to read, but it will cover spaces or tabs between the fields, and your example looks like it has tabs between the fields). To break the line down, the fields, in order, look to me like this: %Y-%m-%d Year-month-day, 2008-06-04 %h:%n:%j hour:minutes:junk, 06:19:44 (Analog doesn't do seconds) %j junk, 0.056 (this might be processing time, %t) %S Host address, 163.167.82.61 %u User, 1zk4LGlY8Yzy5yflRTsT %c Status code, 200 %j junk, GET (the Request method - not relevant for analysis) %r Request, /webct/urw/lc613...urseFS.dowebct %q querystring, tab=view&for...502021 %b bytes transferred, 15348 %j junk, FIW0021:0:6 The "User" field is probably just a cookie, or sessionID, but you can use the User Report to count the sessions. If you don't need to count individual sessions, you can set it to %j) Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
