At 08:07 PM 4/25/2001 +0100, Iain Hunneybell wrote:
>Thanks for this...might be the issue so thanks for the idea. I'll see if a
>sort of the data helps but with some single httpd instance 24 hour log files
>in excess of 200Mb that might be fun :-)
I understand your problem here. He had multiple log files and multiple time
zones which had to be munged to have a common time zone along with sorting
the time information into a single 1GB+ file (for a single day). To say it
took a while before giving the data to WT is an understatement :(
I personally have no idea how a single web server could generate logs like
this in a single file ('misplaced' time events), but he assures me it is
possible and has seen it happen. Regretfully, I don't know which web server
they were using, which could help narrow this.
I knew about some of the problems with WT from personal experience, but the
"throw it away if it doesn't make time sense to me" was a new one. I
personally have never been able to get a good correlation between Analog
and WT so I gave up trying to make sense out of it. I just told people that
Analog was a raw look with no assumptions, and WT generated all the pretty
bar and pie charts and was, basically, a top 10 look at your logs with some
basic assumptions.
They make different assumptions (well, IMHO, WT makes assumptions and
Analog just tells you what is in the file) about the same data, so to see
different results makes sense and that there is extreme difficulty
rectifying the differences would make sense based on the starting point of
both programs.
===
Bob Gahl Bicycle (Ryan Vanguard) Mobile || @
ARPA/Internet: [EMAIL PROTECTED] || !_ \
URL: http://www.bawcsa.org/bgahl/ || (*)-~--+--(*)
"Sahn joong moe low ful how jee yah ching wong" - "When the
mountain has no tigers, the monkey will also declare himself
king." Chinese Proverb
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/analog-help@lists.isite.net/
| http://lists.isite.net/listgate/analog-help/archives/
| http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------