|
Web Log Analysis
Part:
1
2
3
(Continued from previous part...)
3. Downloading my log files to run with "analog".
>cd \local\logs
>ftp mydomain.com
(download access.log.44.gz)
>\local\winrar x access.log.44.gz *.* .
>edit c:\local\analog\analog.cfg
LOGFILE c:\local\logs\access.log.*
>\local\analog\analog
analog: analog version 6.0/Win32
analog: Warning E: Redirecting future diagnostic messages to errors.txt
(For help on all errors and warnings, see docs/errors.html)
>type \local\analog\errors.txt
analog: Warning F: Can't auto-detect format of
logfile access.log.44: ignoring it
...
So "analog" can not read my log file format. Note that "winrar" is a shareware
uncompress .gz files.
4. Configuring "analog" for my log format:
>cd \local\logs
>type access.log.44 | more
192.168.72.177 - - [22/Dec/2002:23:32:14 -0400] "GET
/news/sports.html HTTP/1.1" 200 3500 www.yahoo.com
"http://www.some.com/" "Mozilla/4.0 (compatible; MSIE ...)" "-"
...
>edit c:\local\analog\analog.cfg
LOGFORMAT (%s - - [%d/%M/%Y:%h:%n:%t -%j] "%j %r %j" %c %b %v "%f"
"%B" "%j")
>\local\analog\analog
(no errors)
Here I used the following formating codes for the LOGFORMAT setting:
%s - Numerical IP address of client
%d/%M/%Y:%h:%n:%t - Date and time fields
%j - Junk field. Skip it.
%r - File requested
%c - HTTP response status code
%b - Number of bytes transferred
%v - Virtual host, the server hostname
%f - Referrer URL
%B - Browser information
5. Adding referrer report:
>edit c:\local\analog\analog.cfg
REFERRER ON
REFFLOOR 0r
>\local\analog\analog
(no errors)
The above settings tell "analog" to generate a referrer section in
the report. I have also lowered the lower limit (floor) to show referrers with lower request counts.
Conclusion
- "analog" is definitely a great tool to analyze Web logs.
- The hard part is set the LOGFORMAT setting. But "%j" is your magic code.
Part:
1
2
3
| 