d, but the sample reports on that
website do include Summary tags in the Tables.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/
Troy S wrote:
> I need to included a summary attributed to all html table tags?
?? Can you expand on that? I have absolutely no idea what html table tags have
to do with an Analog report?
Aengus
+
| TO UNSUBSCRIBE f
Terry Chambers wrote:
>
> Hi Aengus - using the INTSEARCHENGINE and INTSEARCHQUERY options, the
> report came through correctly. Thanks!
>
> Using the FILEALIAS also works to break down the data, which is also
> great!
>
> If I wanted to have BOTH the Internal Sear
ou _might_ be able to do something like that with some
FILEALIAS commands.
FILEALIAS /search?*client=*&*&site=*&* /$4?$2
would give you a Request Report that showed how many requests were made by each
client type to each site.
Aengus
+-
otice"
(Note that the REGEXPI isn't necessary - you haven't specified a Regular
expression). Your Request Report would then show the number of requests for
Blue Widgets, the Shopping Cart, etc, and, if you used the PAGEINCLUDE comamnd
above, the entries should be clickable (you m
der described in http://analog.cx/docs/alias.html
("After analog has read each logfile entry, it then applies aliases to each of
the items") and http://analog.cx/docs/include.html ("After aliasing each item,
analog decides whether that item is wanted or not.")
Aengus
+-
ve to have stars (*) on both sides of the question mark?
Because 0847DDA0-F261-59BF-FAA04EB1EC032B61 is not a file name, it's an
argument to index.cfm.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.n
http://www.google.com/search?hl=en&site=&q=site%3Alists.meer.net+analog-help&btnG=Search
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documen
, REQARGFLOOR ir,
for example), you can use a log file with 3 or 4 entries and see how the
reports change as you modify different settings in the config file, or
modify different elements of the log file entries.
Aengus
+
| TO
filename - something like this:
FILEALIAS /?objectid=* /*
FILEALIAS /index.cfm?objectid=* /*
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http
975E-7040A72105801B36
then case isn't an isue, but you will probably also want
REQFLOOR 1r
REQARGFLOOR 1r
if you're doing your tests with one-line logfiles, and
DIRSUFFIX index.cfm
PAGEINCLUDE *.cfm
might also be useful.
Aengus
+--
mes part of the referrer string, and none of the
SEARCHENEGINE entries start with ". You have the same problem with the Browser
field.
Try this LOGFORMAT instead:
LOGFORMAT (%s - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b %v "%f" "%B" %j)
Aengus
+---
, but
you can also find the Internal Search Report useful.
http://analog.cx/docs/args.html#SEARCHENGINE
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| An
E *.mydivision.abc.com
For just the requests abc.com:
HOSTINCLUDE *.abc.com
HOSTEXCLUDE *.mydivision.abc.com
and from the internet:
HOSTEXCLUDE *.abc.com
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists
(used to indicate
where requests are coming from ), the Virtual Host Report (used to show
how much traffic went to the Virtual Hosts abc.com and xyz.com) or the
Request Report?
Aengus
+
| TO UNSUBSCRIBE from this list
forbidden set in anlgform.pl, but
that's where to look when you're testing this.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: h
t attention, or only sporadic
attention to their logs, others may spend a lot of time delving in to them).
Analog is extremely flexible, and is often used in large hosted
environments. But there isn't one "right" way to deploy it - it really
does depend on what you want to achieve.
tual hosts, password
> protect each report, even though I have log data that is on one single
> access_log?
Yes.
> Are DNS lookups cached?
Yes. It is strongly recommended that you use a different tool to generate the
DNS cache, though - Analog is not optimised for DNS lookups.
http://analo
Zourarakis, Demetrio (COT) wrote:
> Thanks. Aengus.
> It would have created 1012 reports...
> I concatenated the logfiles using MS DOS command line into one BIG
> logfile...
No, LOGFILE *.LOG will creat ONE report containing the data from all the
logfiles.
Analog has always al
reports, and your logfile are just names sequentially, (log001.log, log002.log,
etc), then there's no way withing Analog itself to have Analog create the Jan07
report, then the Feb07 report, then the Mar07 report, etc.
Aengus
+--
d it useful to use the ERRFILE command to capture the
output to a file.
http://analog.cx/docs/debug.html#ERRFILE
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Docume
Christoph Kukulies wrote:
> Aengus schrieb:
>> On 8/12/2009 10:47 AM, Christoph Kukulies wrote:
>>
>> Can you post 3 or 4 lines from your log file, including some PDF
>> requests?
> 87.79.34.253 - - [11/Aug/2009:17:58:38 +0200] "GET
> /export/download
r log file, including some PDF requests?
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.anal
Barak Kalai wrote:
> I would like pick multiple log files in windows. The file location is
> drive_letter:\directory\*static_name.zip
LOGFILE drive_letter:\directory\*static_name.zip
http://analog.cx/docs/logfile.html
Dave Sergeant wrote:
> On 20 Jul 2009 at 12:58, Aengus wrote:
>
>> If "real" Safari browsers are identified as 5.something, and Chrome
>> browsers as 530, then
>>
>> BROWSUMALIAS Safari/530 Chrome/530
>>
>> Will still list the Chrome Brows
Dave Sergeant wrote:
> On 20 Jul 2009 at 10:59, Aengus wrote:
>
>> According to Google's own documentation, the Useragent for Chrome
>> looks like: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
>> AppleWebKit/525.13 (KHTML, like Gecko) Chrome/0.X.Y.Z Safari/525.13.
recompile it to identify
Chrome as a seperate browser, I think, but I don't have a copy of the
source to hand to see what would be involved.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/
s - it all depends on how the server was set up.
I don't want to discourage you - it's not actually as complicated as it might
sound, it's just that "local knowledge" is needed to answer the question.
Aengus
+--
t;%r" %>s %b "%{Accept}i" "%{Referer}i"
> "%{User-Agent}i")
Analog is able to parse out the escape "quotes", and the APACHELOGFORMAT line
works with the sample line that Dan posted, with or without the \'s.
I just copied the sample line into a file, added
/pipermail/analog-help/2008-June/021101.html
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http
whether it's a tab or a space (or multiple
spaces). It makes it harder to read the LOGFORMAT, but it should work for you.
for example: %S%w[%d/%M/%Y:%h:%n:%j]%w"%j%w%r%w%j"
Aengus
+
| TO UNSUBSCRIBE from this li
On 6/23/2009 8:37 AM, Rogers, Steve I. wrote:
Aengus,
Thanks very much for your prompt response. However, what I am looking
for is the "bigger trends". I have a PDF directory and I my customer
wants to know which users are accessing those PDF documents. The
information is in th
Rogers, Steve I. wrote:
> In a previous thread, user Aengus mentioned that "
>
> you can get a list of all the Users (IP addresses or UserIDs) that
> accessed a single page"
>
> How would I get that report from Analog? I turned on the User report
> but I only get
ent from
> /docsinf/search
> And
> /yabb
>
> (examples)
>
> Why?
If you run
analog -settings
there'll be a section near the top that will detail what Analog is including
and excluding. If there are any conflicting requests, it should be obvious from
there.
Aengus
Aengus wrote:
> If there aren't any errors in your code, then a few minutes later you
> should have a new copy of analog.exe with your modifications. Note
> that it won't have the Analog icon, but other than that it should
> work fine.
It turns out that adding the ico
tes later you should
have a new copy of analog.exe with your modifications. Note that it won't have
the Analog icon, but other than that it should work fine.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.m
Robin Lee Powell wrote:
> On Tue, May 05, 2009 at 12:53:33PM -0400, Aengus wrote:
>> Robin Lee Powell wrote:
>>> On Mon, May 04, 2009 at 05:52:52PM -0400, Aengus wrote:
>>>> Robin Lee Powell wrote:
>>>>>> If there's no other way to solv
Robin Lee Powell wrote:
> On Mon, May 04, 2009 at 05:52:52PM -0400, Aengus wrote:
>> Robin Lee Powell wrote:
>>>> If there's no other way to solve this problem, please consider
>>>> this a feature request to split those out.
>>
>> I'
ose out.
I'm afraid you're probably going to have to make this mod yourself - Analog
hasn't had an official update in almost 4 years. A quick look at the source
suggests that you might be able to get away
mes a particular file was
requested, but you don't have a record of every request for that file any more,
therefore you can't find out how many requests occurred between two points in
time.
Aengus
+
| TO UNSUBSCRIB
uests without
arguments, but one way is to use FILEALIAS so that the ? separating the
arguments isn't recognized - in that case all of the ocsportal.portal
requests will be listed seperately
FILEALIAS /web/oscportal.portal?
that list to see if
this issues has been discussed more extensively there.
http://lists.meer.net/pipermail/analog-help/2002-July/012919.html
http://www.jp.analog.cx/ml/archive/
Aengus
+
| TO UNSUBSCRIBE from this list:
|
, and the report time
>> frame appears to be frozen at March 10.
>>
>> What can be done to force it to refresh the data?
If it's a service set up and managed by GoDaddy, then you'd have to ask GoD
can specify several LOGFORMAT commands in a row, and they will all apply
to the next logfile. This is also useful if the format of your logfile
changes half way through."
Aengus
+
| TO UNSUBSCRIBE from this list:
On 3/10/2009 9:31 AM, Nanu Kalmanovitz wrote:
Can Analog be configured to ignore the IPv6 like records ( ::1 - - [26/Feb/2009:11:13:58
+0200] "GET /" 400 991) in the access_log file?
LOGFORMAT (::%j)
Aengus
+
As Klaus said, - is not a wildcard, it's a specific string, and 7296 doesn't
match -, and neither does http://axx.uk/
If you don't care about the byte count, or the referrer, use %j instead of
those particular - characters, or use %b for the byte-count field, and %f for
the r
%M/%Y:%h:%n:%j] "%j %r" %c %b)
http://analog.cx/docs/logfmt.html
But you don't want to add those requests to your current Analog report.
If you do create a new report to count these lines, you'll need to look
at the Failure Reports, because the Response code is 400.
Aengus
+
s. But that won't tell you why
your web server is using two different logformats, (or whether it's
recording the same request twice).
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/li
setup. (Note that Analog
doesn't know or care what is set up in your apache configuration files -
it will only use the LOGFORMAT or APACHELOGFORMAT commands in
analog.cfg, or autodetection, if you don't have a LOGFORMAT).
Aengus
+
rt that doesn't match.
You might want to use the ERRFILE command to send the output to a file,
rather than to the screen.
http://analog.cx/docs/debug.html#ERRFILE
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://li
behaved spiders identify themselves.
You can also do a Full Browser report on requests for /robots.txt and
then use that to create a list of BROWEXCLUDE commands so that you can
see if the human-driven traffic patterns make more sense.
Aengus
+-
On 1/7/2009 7:42 PM, Casual Account wrote:
Thanks Aengus
That sorted the problem. Does that command also apply to the browser
> report? (ie when I added it I got a mismatch on bytes and pages
> again, but could fix this by changing BROWREPSORTBY REQUESTS and
> BROWSUMSORTBY REQUESTS
) doesn’t match SUBSORTBY
(bytes)
I have commented out any sorts using bytes and cant see to work out why
this is occurring.
Have you tried adding SUBDIRSORTBY PAGES?
Aengus
+
| TO UNSUBSCRIBE from this list:
|http
XP 64 bit and
32bit uniquely.
Windows XP 32-bit is Windows NT 5.1
According to Wikipedia, "Windows XP 64-bit Edition 2003" is based on the
Windows NT 5.2 codebase, and is therefore identified as the same OS as
Windows Server 2003.
Microsoft define
reation of the patches mentioned earlier. You can download a copy of
the modified executable for Windows here:
http://www.xs4all.nl/~jfeelder/downloads/analog.exe
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://list
BROWALIAS "Windows NT 6.0 " "Windows Vista" will it work?
I don't think that's ever come up on the list - have you tried it? It
should only take a couple of seconds.
Aengus
+
| TO UNSUBSCRIBE fr
of people have posted modified binaries that you can download
from their own websites. None of the binaries available from
www.analog.cx have this support.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.n
;.So is it possible to get the report as Vista under the
OS report and how it can be done?
http://lists.meer.net/pipermail/analog-help/2008-October/021339.html
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.n
ory of
the customer that needs it. You'll get a warning that Ananlog couldn't find the
custom.cfg file for the other customers, but Analog will still create the
reports.
Aengus
+
| TO UNSUBSCRIBE from this li
string to "/Search.aspx?keyword=Analog6" to match the
INtsearch entries you listed above.
I modified your referrer string to "http://www.google.com/search?q=analog+6.0";
because Google is one of the searchengines listed in sample analog.cfg file:
SEARCHENGINE http:
Leung, Michael <[EMAIL PROTECTED]> wrote:
> REQARGFLOOR 100%r
That should be
REQARGSFLOOR 100%r
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Docu
Leung, Michael <[EMAIL PROTECTED]> wrote:
> Aengus
>
>
> When I use the REQFLOOR -20r, I got the following:
>
>
> Request Report
> --
> This report lists the files on the site.
>
> Listing the top 20 files by the number of requests
hich is not turned on by
Default). Turn it on with
HOST ON
The full list of reports that Analog can produce is listed here:
http://analog.cx/docs/reports.html#repoth
The list of commands for turning these different reports on and off is here:
http://analog.cx/docs/out
e last 7 days, you'd use
REQFLOOR -20q
http://analog.cx/docs/othreps.html#FLOOR
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Re
h something like
146-115-44-11.c3-0.sbo-ubr1.sbo.ma.cable.rcn.com. It makes sense to someone at
rcn.com.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Docume
On 12/1/2008 6:55 PM, Leung, Michael wrote:
Based on my LOGFORMAT, my Referrer field shouldn't be empty. Right?
The sample logfile entry that you provided had a referrer field
(https://www.networksolutions.com/manage-it/private-registration-splash.jsp)
A
, using Analogs built-in lookups
wouldn't be the best idea. For learning about DNS lookups, a sample from
the logfile of a few hundred lines would be a better idea. For DNS
lookups on anything larger than that, you really need to use one of the
the DNS helper apps.
A
Leung, Michael <[EMAIL PROTECTED]> wrote:
> Aengus,
>
> The below is what we see for the Domain Report, but it is not what we
> are expecting.
>
> Listing domains, sorted by the amount of traffic.
>
> reqs %bytes domain
> 655193 100% [unresolved numerical ad
%s - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b "%f" "%A"
> "%j" "%j" "-"
Almost right. The Logformat string has to be delimited (usually with () ) and
the Browser string is usually indicated with %B, but %A seem
.
What am I doing wrong?
http://analog.cx/docs/faq.html#faq101
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
a,
but the discussion forum indicates that it's a bit more usable at this point.
If I had the time (and a pressing need), I'd invest an afternoon in trying to
get it working, but I think I'll leave it on the to-do list for now :-)
Aengus
+---
a good idea what you want to get from your log
files, and Analog delivers on those needs, then it's going to keep delivering.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinf
e Analog run automatically
at a certain time every day, you can use the "cron" command. This might not
work properly at first, because of file permissions, but give it a try.
Solo analogico genera output quando si esegue esso. Per avere analogico
eseguito automaticamente in un
so just add an
additional entry for decoding the lines with the extra IP addresses.
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b "%f" "%B""%j" %D)
LOGFORMAT (%S, %j %j %u [%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b "%f" "%B""
ever your
Apache logformat string gets a bit complex, you're going to have to give
up on the convenience of this automatic translation mechanism, and tell
Analog exactly how it should interpret the logfile, by writing an Analog
LOGFORMAT string, rather than relying on Analog to do the tran
7;t tell you if
your config file works, it just tells you what's in it.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.c
call anlgform.pl? What's the
HTTP Status code in your log file for that request?
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://anal
analog.cfg
Config files aren't "either/or" - you can have multiple .cfg files, so the -G
turns off the default.cfg file, and you can use +g to turn on your other.cfg
file (you can have multiple +g commands).
http://analog.cx/docs/syntax.html#specialcfgs
Aengus
+-
case G the
argument is too long, and Analog ignores the end of it.
You want +gc:\analog\rgraph-analog.cfg, with a lower-case g.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
ions for compiling Analog on Windows yourself, though
it included links to specific versions of the various tools that may or
may not be still available, but I imagine that the current versions of
the various components would do the just just fine.
http://lists.meer.net/pipermail
don't see anything about that in the documentation so I am
>> guessing the answer is no but wanted to check with the experts.
http://analog.cx/docs/faq.html#faq181
Aengus
+
| TO UNSUBSCRIBE from this list:
u won't see anything from
this unless you turn on some of the Virtual Host reports).
The character after the IP address is a space, and then everything until the
timestamp is junk, so it's "%s %j[" rather than "%s - - [", but either style
will do.
Aengus
+--
j "%u" [%d/%M/%Y:%h:%n:%j] "%j %r %j" %c %b "%f" "%B")
DEBUG ON
You should be able to delete the other 12 lines from your .cfg file, as they
don't appear to be doing anything useful (I'd be particularly concerned about
that LOGFILE line - are you
"%j %r" %c %b)
> DEFAULTLOGFORMAT (%S %j "%u" [%d/%M/%Y:%h:%n:%j] "%r" %c %b)
Are these lines in your .cfg file for a reason?
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.
;re calling Analog with the logfiles specified on the command line, then
these lines should work:
DEFAULTAPACHELOGFORMAT (%h %l \"%u\" %t \"%r\" %>s %b)
DEFAULTAPACHELOGFORMAT (%h %l \"%u\" %t \"%r\" %>s %b \"%{Referer}i\"
\"%{
Ulf Hofemeier <[EMAIL PROTECTED]> wrote:
> Quoting Aengus <[EMAIL PROTECTED]>:
>
>> Ulf Hofemeier <[EMAIL PROTECTED]> wrote:
>>> Hi folks:
>>>
>>> I could use some help figuring out the correct syntax for a new
>>> LogFormat li
't work (resulting in corrupt logfile lines)
Have you tried just using your Apache command directly?
APACHELOGFORMAT ("%h %l \"%u\" %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"")
If that doesn't work, can you post a coup
You can tell Analog to ignore the arguments for a particular script with
ARGSEXCLUDE -
ARGSEXCLUDE /path/script.jsp
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog D
recompiling the existing code as a 64-bit binary, then it'd
be a simple task for them. If it involves any significant code changes
to Analog, then there is very little history of such work being handled
on this list.
Aengus
+--
load - the server only sends packets as the client requests them,
otherwise the server, with it's high speed connection, would just spit out the
whole transaction faster than the client could accept it.
Aengus
+
| TO UN
be able to confirm it by
looking at the details of some of the log entries that show high %T values.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentati
2008/08/03/*
etc.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/ma
m and directories (*/) as "Pages". If
you use something else to define a page, then you need to tell Analog about it.
http://analog.cx/docs/include.html#PAGEINCLUDE
Aengus
> - Original Message
> From: Aengus <[EMAIL PROTECTED]>
> To: Support for analog web log ana
simple way that I can think to what you want to do
without modifying the CSS.
http://analog.cx/docs/output.html#LOGO
(Maybe you could do something with a dummy Virtual Host Report, and a
dummy logfile with a single link to your text file).
Aengus
o have a pretty intimate understanding of any
particular website to make a fair judgement about what metrics might
make sense for that particular website.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.n
Wayne Czybora <[EMAIL PROTECTED]> wrote:
> stop sending emails.
Instructions for unsubscribing from this list are included at the bottom of
every single message sent to the list.
> +
>> TO UNSUBSCRIBE from this list:
>>
gine Report or the Internal Search Engine
Report.
Different websites have different traffic patterns, so the answers will be
different for different websites.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.
"testApp/1.0; Win32" "testApp/1.0; (Windows NT 5.1)"
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs
and the %b is the best way to get a report on the inbound
bytes, if that information is important. You can't repotr on inbound and
outbound bytes at the same time in Analog.
Aengus
+
| TO UNSUBSCRIBE from this list:
cumentation, but it's because for the vast majority of websites, the
"inbound bandwidth" is irrelevant - it's not even logged in most cases.
For those sites that care more about inbound than outbound bandwidth,
it's easy to modify the LOGFORMAT to report on it.
1 - 100 of 1058 matches
Mail list logo
