Processing Apache Log Files with "Analog"

Windows Tutorials - Herong's Tutorial Examples

∟Web Server Log Files and Analysis Tool - "Analog"

∟Processing Apache Log Files with "Analog"

This section provides a tutorial example on how to process Apache log files with 'Analog'.

1. Downloading my log files to run with "analog".

>cd \local\logs
>ftp mydomain.com
   (download access.log.44.gz)

>\local\winrar x access.log.44.gz *.* .

>edit c:\local\analog\analog.cfg
   LOGFILE c:\local\logs\access.log.*

>\local\analog\analog
analog: analog version 6.0/Win32
analog: Warning E: Redirecting future diagnostic messages to errors.txt
  (For help on all errors and warnings, see docs/errors.html)

>type \local\analog\errors.txt
analog: Warning F: Can't auto-detect format of 
   logfile access.log.44: ignoring it
...

So "analog" with default settings can not read my log file format. Note that "winrar" is a shareware uncompress .gz files.

2. Configuring "analog" for my log format:

>cd \local\logs
>type access.log.44 | more
192.168.72.177 - - [22/Dec/2002:23:32:14 -0400] "GET 
   /news/sports.html HTTP/1.1" 200 3500 www.yahoo.com 
   "http://www.some.com/" "Mozilla/4.0 (compatible; MSIE ...)" "-"
...

>edit c:\local\analog\analog.cfg
   LOGFORMAT (%s - - [%d/%M/%Y:%h:%n:%t -%j] "%j %r %j" %c %b %v "%f"
      "%B" "%j")

>\local\analog\analog
   (no errors)

Here I used the following formatting codes for the LOGFORMAT setting:

%s - Numerical IP address of client
%d/%M/%Y:%h:%n:%t - Date and time fields
%j - Junk field. Skip it. 
%r - File requested 
%c - HTTP response status code 
%b - Number of bytes transferred 
%v - Virtual host, the server hostname
%f - Referrer URL
%B - Browser information

3. Adding referrer report:

>edit c:\local\analog\analog.cfg
   REFERRER ON
   REFFLOOR 0r       

>\local\analog\analog
   (no errors)

The above settings tell "analog" to generate a referrer section in the report. I have also lowered the lower limit (floor) to show referrers with lower request counts.