#replist
If you paste the full text of the error you get, someone should be able
to help you.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate
are looking for.
(Note that I have sent this response to the list. Please keep all analog
related questions on the list).
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http
pages.
You can control the number of entries in any report by using the FLOOR
commands.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate
logformat also has 5 fields before the date/time, whereas your
logfile only has 4.
LOGFORMAT (%j %s %j %u [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b %f)
parses the two sample lines from your debug output.
Aengus
+
| This is the analog
been ported to NT since
then).
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
posted, so I
may well have missed something, but usually a couple of lines are enough
to set this up.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
|http://www.mail
directive includes a field
to tell Analog where to find the actual search terms in the referrer.
SEARCHQUERYINCLUDE/EXCLUDE will only include or exclude queries from
Engines that are already defined with the SEARCHENGINE directive.
Aengus
server, and I need to monitor internet
traffic per username in a month.
I cannot figure out how to do this with analog (I'm a novice...).
USERCOLS
http://www.analog.cx/docs/othreps.html#othCOLS
Aengus
+
| This is the analog
it works perfectly.
The usual cause of this problem is that the cron job is running under an
account that doesn't have permissions in the directory that the logs
files are in.
Aengus
+
| This is the analog-help mailing list
ON.
SETTINGS ON isn't interfering with DEBUG and OUTPUT, they just don't
have any function when Analog is just displaying it's current settings.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from
have edited.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
|http
that include the HTTP bit in the
request string and some that don't, you'll need 4 lines. (The first and
last line are basically the same, except that I just used a space
instead of %w). You just replicate your existing LOGFORMAT lines and add
%j for the last field.
Aengus
question about the referrer report. It
suggests adding the N column to make it clearer that the sort order is
correct, but interrupted by sub items.
http://www.analog.cx/docs/faq.html#faq125
Aengus
+
| This is the analog-help
haven't done much with Directory reports, but shouldn't that be
SUBDIR /gucdc/*/*/*
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog
report
for January, and January22.html to give a more detail report for the 22nd of
January (and presumably January1.html to January31.html for each day in
January).
Aengus
+
| This is the analog-help mailing list. To unsubscribe
httpd.conf?
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
|http
day for all of our
sites to insert his code.
http://www.analog.cx/docs/output.html#HEADERFILE
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net
as a User.
What LOGFORMAT are you using?
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
everything except the specified file.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
, it
might make more sense to fix the program that's producing the output,
rather than applying the fix to Analog.
What application is producing the logs?
Aengus
+
| This is the analog-help mailing list. To unsubscribe from
entries is if you are trying to keep count, so You
might put multiple %j's if you wanted to ignore the 4th and 5th of 8
entries, for example.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing
/academy/74/photos/3 as a request, but you consider that to be a request
to a page called photos, with a parameter of 3, then you may want to use
the Subdirectory report, rather than the request report. If the log shows
a request for /academy/74/photos then you may have to try a different
tack.
Aengus
be only looking at port 80 requests, but you
should get a warning message about corrupt log entries.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http
against it and my result shows 3 successful hits.
Any suggestion what I should try next? Thanks!
What does the General Summary say about the other lines? It should show
how many were corrupt or ignored (unwanted).
Aengus
make any difference
to Analog. Why would it object to
LOGFILE //server_name/LogFiles/ex%y%M??.log
but not
LOGFILE //server_name/InfoCtrLogs/in%y%M??.log?
Have you checked that the process that is running Analog has permissions
to access //server_name/InfoCtrLogs?
Aengus
with unresolved numerical addresses?
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
).
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
|http://www.mail
requests fall into that size window, but you can get a report
of the associated users. I think you might need to use some sort of
preproccessing to extract the requests that meet your criteria, and then
do a report of them.
Aengus
values?
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
|http
Jeremy Wadsack [EMAIL PROTECTED] wrote:
Aengus ([EMAIL PROTECTED]):
I think your best bet will be to grep the logs for matching
requests. Does anyone know how to create a regular expression
to pick out lines with a field that is between 2 numerical values?
You have to know the numbers
of the other
reports, the FLOOR allows you to limit the length of a particular report.
But the file size report can never be more than 10 lines long, so it
doesn't need a FLOOR.
There is always only one value in *floor commands,
and I need two of them...
Why would you need two?
Aengus
\sites\site.cfg %logfile%
There are some examples of getting the date into an NT environment
variable in the list archive:
http://www.mail-archive.com/analog-help@lists.isite.net/msg06596.html
Aengus
+
| This is the analog
detailed example of a batch file for NT for calling
monthly log files at:
http://www.mail-archive.com/analog-help@lists.isite.net/msg06596.html
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing
need to specify the non-standard settings for each site - the
log file location, the Hostname, any custom settings. (You may be better
off using a single, shared DNS file - it will save you looking up the same
address for different sites).
Aengus
;+ASPSESSIONIDGCOU=JJJLABHEFONERDEWRIOD;+font=Pull=1Push=7
htp://od2.com/home/index.asp
and the LOGFORMAT I am using is
LOGFORMAT (%Y-%m-%d %h:%n:%j %s - %j %j %j %j %j %r - %c %b %j %j %j %u
%f)
That LOGFORMAT parses that sample line. What problems are you having with
it?
Aengus
numbers of unresolved addresses
showing up.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
period that
Analog should include. Check you Analog.cfg file for any FROM directives.
If you don't find anything, try running Analog with SETTINGS ON in the
config file, and see if it provides any clues.
Aengus
for hosts that are defined locally.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
lines of
explanation in the analog.cfg, a more explicit discussion of the issue in
startpc.html, a batch file in the Windows distribution that included a
pause command, or even a windows .pif file.
Perhaps the people who have encountered this problem can comment?
Aengus
the first and
last time of access (USERCOLS ED). If you generate a report against unique
session-ids, this will give you some of what you want.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing
don't necessarily mean what they appear to mean on the surface. Analog
doesn't deliver those numbers not because it's hard to do, but because the
numbers aren't reliable, because of the very nature of the way the
Internet is organized.
Aengus
information is being tracked in a cookie, then
you must be checking that cookie within the page access code. I presume
that code uses some sort of timeout mechanism? If so, then that's the
place to count your sessions, not in an after the fact log analysis.
Aengus
dynamic
reports, it would be possible to modify the perl script to insert
USERINCLUDE commands based on the logonID of the administrator.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list
told to look for (to the exclusion of everything
else).
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
. Username refers to whatever field in your log file that
you map with %u. It might be the logonID field, or a cookie, or even the
IP address.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing
/warnings that explain
why you are getting an empty report.
(You can also add ERRFILE error.txt, and then open error.txt in notepad
instead.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list
generated by
only 200 different hosts, it should answer your first question.
Is there a rule-of-thumb for how many requests are genuine human
requests?
Different websites would have different rules of thumb. There really is no
general answer.
Aengus
simultanously.
Until you find out what that last field is for, I'd suggest this
logformat:
LOGFORMAT (%S %j - [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b %j %j %B%j)
Aengus
+
| This is the analog-help mailing list. To unsubscribe from
directorys for
example /free ?
FILEINCLUDE /free/*
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List
with, but putting a * in the line below it, if you
turn debugging on.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
or any other output to
files, so I also miss the pie-charts in which i'm interested
to have.
If you want to create htm files, use analog.exe, not anlgform.exe.
Aengus
+
| This is the analog-help mailing list. To unsubscribe
the bigbyrep.cfg file in the examples folder
as a
starting point, and made changes to customize.
My logformat now looks like this:
LOGFORMAT (%S%j[%d/%M/%Y:%h:%n:%j%j] %j%w%rHTTP%j %c%b %B %f)
LOGFORMAT (%S %j %j [%d/%M/%Y:%h:%n:%j %j] %j %r HTTP%j %c %b %B %f)
Aengus
, and ends up
parsing the Referrer string as a Browser string, and can't find any query
string in what it things is the Referrer (but is actually the Browser
string). It looks as though you were on the right line above, but that you
inadvertently commented out your LOGFORMAT line.
Aengus
to see it displayed.
REFERRER ON
REFFLOOR 1r
REFARGSFLOOR 1r
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
to the
!huge amount of data it has to parse but its going.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
make it harder to
keep track of what changes you have made. You may find it easier to start
with an almost blank analog.cfg, and only add commands for behaviours that
you explicitly want to control.
Aengus
be happening?
If you do a report on just one of those days (using a FROM - TO pair), do
you get anything?
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net
of hits not to be reported.
I had assumed that you have a single log file. But if you're generating
DNS files of that size, your log file would have to be huge. If you
disable DNS lookups, do you see the holes in your reports? If not, then
it's unlikely to be a DNS issue.
Aengus
of the main analog.cfg
Each time Analog runs, it creates 1 output file. If you want multiple
output files, you run Analog multiple times.
analog +gunicareanalog.cfg
analog +gglobetrottersanalog.cfg
Aengus
+gcort.cfg entry. Again, when I run the /usr/local/bin/analog
+gcort.cfg
from the command line, it works fine.
crontab errors are usually caused by permission problems. The cron process
doesn't have permission to read cort.cfg.
Aengus
for
all that time (though there may be a limit on how many different sets of
credentials it will remember).
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http
Digital Photography Now Information [EMAIL PROTECTED] wrote:
Thank you too, Aengus, but your solution hasn't worked either
- I get successful requests - 0 and x number of corrupt logfile
lines.
If you try my LOGFORMAT against the sample lines you posted yesterday, you
will find that it does
, (the referrer field, which
is quoted, and www.dp-now is not quoted). I'd guess that www.dp-now.com is
the Virtual Host, %v, so I'd try:
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] %j%w%r%wHTTP%j %c %b %v %f
%B)
(all on one line).
Aengus
in that log file in about 10 or so minutes using
a helper app. Have you tried to use DNSTrans with your logs?)
I don't know of any way to do what you're actually asking for, because I
presume that Analog simply switches the value of STDOUT when you set the
ERRFILE directive.
Aengus
, for example, use
PAGEINCLUDE *.jip, *.pl
(This is referred to in passing in
http://www.analog.cx/docs/faq.html#faq126)
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http
log entries, or is the page
requested somehow munged into the file name. More to the point, I don't
know whether such partial requests get a 200 or a 300 status code. If
Analog doesn't recognize the status code as a successful response, then
the request won't show up in the Request Report.
Aengus
|
%{Referer}i |
%{User-Agent}i)
This also works on NT.
LOGFORMAT kodekrash
Analog doesn't read your httpd.conf, so it doesn't know what kodekrash is.
APACHELOGFORMAT kodekrash
ditto.
Aengus
+
| This is the analog-help
, but only one user at a time. If you use
the USERINCLUDE command, then all files listed in the Request report were
accessed by the specified user.
If you want to see all the files accessed by each of 10 individual users,
then you run Analog 10 times.
Aengus
at the big picture.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
|http
need to set the REFARGSFLOOR
lower. To avoid seeing them, you could set the REFARGSFLOOR higher,
or alternatively use the REFARGSEXCLUDE command to ignore them either
for all files or just for particular files.
Aengus
format instead of
the IIS log format?
I think you have that question the wrong way round. There are NO
advantages to running the IIS log format. W3C is always better.
http://www.analog.cx/docs/faq.html#faq151
Aengus
:
http://www.analog.cx/docs/output.html#TIMEOFFSET
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List
files, and
paste them directly into the analog.cfg file, but specify APACHELOGFORMAT.
The specifications are different, which is why the example above didn't
work as an APACHELOGFORMAT, but did work as a LOGFORMAT. Apache, for
example, uses \%{Referer}i\ whereas Analog uses %f.
Aengus
filtered
...
Unwanted lines are lines that have been EXCLUDED or not INCLUDED. It looks
like you have a VHOSTINCLUDE command somewhere that implicitly excludes
everything, because your LOGFORMATS don't include %v.
Aengus
using something like ReportMagic to generate the header you
quoted?)
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help
Bruce Keene [EMAIL PROTECTED] wrote:
Can anyone tell me how to set up domain reports for analog
Analog does Domain reports automatically, but you have to do DNS lookups
to get anything useful.
http://www.analog.cx/docs/faq.html#faq140
Aengus
is the
redirecting page, then you could use that, but I'm not sure whether
browser update the referrer field when following a redirect.
If the source of the redirects is a script of some sort, your best bet is
to have the script make it's own log of the requests that it has
redirected.
Aengus
of such lines will be the Unwanted logfile entries in the
General Summmary.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help
Funmi Beckley [EMAIL PROTECTED] wrote:
I am still unable to run a user report after following all of
the advice. Is it possible to see an example of what one looks
like?
Can you post 3 or 4 lines from your logfiles.
Aengus
QuickDNS is for.
The problem with quickDNS is that you have to specify your DNS server with
the /Y parameter, eg:
qdns /L logfile.log /D dns.dns /Y xx.xx.xx.xx
where xx.xx.xx.xx is the address of your DNS server.
Then add
DNS READ
DNSFILE DNS.DNS
to your analog.cfg file.
Aengus
), then your best bet might be to modify the
Analog source code.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help
a custom LOGFORMAT that tweaks the order of the
fields.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List
that request to indicate that it's an SSL request.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
Lucas Lima [EMAIL PROTECTED] wrote:
I want to know if it is possible put in the Failure Report:
The Host IP which gives the failed request together with the file.
Analog won't do that kind of cross-referencing. See
http://www.analog.cx/docs/faq.html#faq128.
Aengus
to 'learn' the necessary
Perl?
That depends on how you plan to use perl to solve the problem.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate
From: Stephen Turner [EMAIL PROTECTED]
On Sun, 3 Feb 2002, Aengus wrote:
I don't think you can alias a request based on an argument, but I
don't
know for certain.
Yes, you can. The ALIAS is on the whole name, including the argument.
Okay. It looks as though:
FILEALIAS /nl.asp?url
to
the default W3C format. It's self documenting, and doesn't require you to
specify any LOGFORMAT string, and gives you more flexibility, without
losing any of the information in the ISA logformat.
http://www.isaserver.org/pages/tutorials/configuring_isa_server_log_files.
htm
Aengus
Jeremy Wadsack [EMAIL PROTECTED] wrote:
There *is* a type in Aengus's format string. Try this instead:
%S\t%u\t%B\t%Y-%m-%d\t%h:%n:%j\t%j\t%j\t%v\t%j\t%j\t%b\t%T\t%j\t%j\t%r\t%j
\t%c
I was just making sure that you're paying attention, Jeremy :-)
Aengus
string with no results:
(%s %B %Y-%m-%d %h:%n:%j %j %j %v %j %j %j %j %t %j %b %j %j %r %j %c)
Your logfile doesn't use spaces to seperate each entry, it uses tabs.
And on the debug the * appears after the first C:
Because you told Analog to expect a space, and it found a tab instead.
Aengus
ON, Analog puts a * under the | in the WebLogicSession
field. Your Logformat uses | as a separator, and Analog is expecting to
find another | immediately after that one, but finds 8 instead, so it
doesn't match any of your Logformats.
Aengus
suggest much
if you don't provide an example.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
the W3 Extended logs.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available
/barb4.gif
file://hq0nts124/d$/temp/Analog/report/images/barb1.gif
http://www.analog.cx/docs/output.html#IMAGEDIR
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http
Extended format, then use that, so
that you won't have to mess around with logformats that nobody
understands.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http
Analog doesn't stop processing when it generates that warning. Check the
report it creates, it should be complete, but byte count information will
be unreliable.
Aengus
+
| This is the analog-help mailing list. To unsubscribe
occurences of
)
by
)carriage return
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives
problem.
Aengus
+
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
|http://www.mail
would be to grab a copy of the
source and compile your own version, allowing Analog to calculate the
results for USERFLOOR 6R, but only displaying whatever you modify it to
display.
Aengus
+
| This is the analog-help mailing
in the
logfile and creating a logformat - if it can't understand the logformat,
it's likely to be because it's ambiguous, and a more aggressive aplication
would be only marginally more successful anyway.
Aengus
1 - 100 of 501 matches
Mail list logo
