Brian Clanton <[EMAIL PROTECTED]> wrote:
> I have two types of log files for a Proxy Server that I am anylyzing
> with Analog:
> 
> local 75.149.219.73 - - [18/Jul/2008:13:58:19 -0600] "GET
> http://infotrac.galegroup.com/itweb/caro83221?id=caro83221&db=LitRC
> HTTP/1.1" 301 555
> proxy 67.167.91.241 - fGKzhzjLu6flE6G [18/Jul/2008:14:33:07 -0600]
> "GET http://mldv.permissiontv.com/channels/carol_il HTTP/1.1" 200 0
> 
> The logs can either "local" or "proxy".  This designates whether or
> not a request is coming from inside of an IP range or outside of an
> IP range. 
> 
> My question is....
> 
> How can I get a report within the Organisations Report to tell me how
> many requests are internal, "local" and how many are remote, "proxy"?

I'm not sure what you mean by "a report within the Organisations Report" but 
you can use one of the reports that you aren't currently using, and "hijack" 
it's field to report on how often a specific term turns up in that field.

For instance, if you're not using the User Report, you can create a logformat 
with %u in the first field, turn on the User Report, and it will show you how 
many request were made by the user "local" and how many were made by the user 
"proxy".

If you are using the User Report already, you can also repurpose the Virtual 
Host report in the same way. (You might be able to do something with the 
Browser Report too).

Aengus

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to