ins - eg
HOSTALIAS 172.26.12.* chicago.jedi.com
HOSTALIAS 172.26.12.* newyork.jedi.com
(HOSTINCLUDE allows you to specify a range of addresses, but you might need
to use a regular expression to include a range of subnets in a single
HOSTALIAS command
Aengus
+-
says "In Domain Report, turning off empty pie chart", so it
looks as though Analog won't expand Unresolved domain names.
By the way, if you don't know what department uses each subnet, why do you
want to draw a
if one was specified, and otherwise the time of the
start of the program.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Re
On Tuesday, February 28, 2006 4:44 PM [EDT],
Aengus <[EMAIL PROTECTED]> wrote:
> The Error file says "In Domain Report, turning off empty pie chart",
> so it looks as though Analog won't expand Unresolved domain names.
I was able to expand the unresolved names in the D
On Wednesday, March 01, 2006 8:24 AM [EDT],
Aengus <[EMAIL PROTECTED]> wrote:
> On Tuesday, February 28, 2006 4:44 PM [EDT],
> Aengus <[EMAIL PROTECTED]> wrote:
>
>> The Error file says "In Domain Report, turning off empty pie chart",
>> so it looks as t
t; I don't think so, because I have HOSTSORTBY DATE and HOSTFLOOR 1R,
> and the hosts sort just fine. So why can't I have REFSORTBY DATE and
> REFFLOOR 1R?
The Host Report isn't hierarchical.
Aengus
+
On Thursday, March 02, 2006 12:14 PM [EDT],
Brereton, Stephen <[EMAIL PROTECTED]> wrote:
> No - altering the LOGFORMAT makes no difference.
That's because IIS5 doesn't use Microsofts old logfile format by default, so
LOGFORMAT MICROSOFT-NA and LOGFORMAT MICROSOFT-INT aren't usually relevant
for
it chart more than just the
> top 10 domains?
> I didn't see anything under the chart commands quick reference.
http://analog.cx/docs/othreps.html#CHART says:
" Here are the exact rules for which wedges are plotted in the pie chart. Up
to ten wedg
On Thursday, March 02, 2006 12:39 PM [EDT],
Aengus <[EMAIL PROTECTED]> wrote:
> On Thursday, March 02, 2006 11:13 AM [EDT],
> Obi-Wan <[EMAIL PROTECTED]> wrote:
>
>>> Okay, try this:
>>> HOSTALIAS REGEXP:172\.26\.(\d{1,3})\.(\d{1,3})$ $1.net
>>>
&g
On Thursday, March 02, 2006 6:51 PM [EDT],
Michael & Rochelle Ireland <[EMAIL PROTECTED]> wrote:
> First thanks to Aengus and Steven for helping me with the sortby
> function. It was so simple yet somehow it escaped me ... it's
> allgood now.
>
> Anyway, now is the
.
> 2. Why the corrupted log lines in log file?
Because not all of the lines in your logfile matched the format, obviously.
You can see which lines didn't match, with an indiction of where the
mismatch occurred by turning debugging on, and looking at the error output.
htt
00 216
> FILEALIAS *GET.*?\/.*?HTTP\/1\.0.* GetRoot
You haven't included your LOGFORMAT, but it would be very unusual if GET,
HEAD or OPTION were part of the Request field (%r). Usually they are marked
as junk (%j). If they are %j, then they aren't going to be matched in an
ALIA
put file.
Even though you're using XHTML output, you're still writing to report.dat.
You should probably set OUTFILE to Report.htm as well.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/list
way
to achieve what you want to do in this specific instance would be to
FILEALIAS the CSS files to a single file with the browser type as a
parameter - something like
FILEALIAS /scripts/css_*.css /scripts/css_browser.css?$1
Or you could just look at the Browser Report :-).
Aengus
>
> Thanks a
t fake the useragents much on the css files
> because they do not load the css
>
> Thanks a lot
>
> Michel
> PS: You are very guruific, did you (co)write Analog or ReportMagic?
I've been using Analog for years, and have been contributing to the mailing
list since it started at the
o I looked at. I don't know whether these are
> still legit to use or safe or what.
>
> Anyone else care to chime in?
They're still safe and legit - not much has changed in the DNS world in the
last few years.
Aengus
+---
erent questions of a cache file than the ones it was
designed to answer is an unreiable process.
You can create the cache file at the same time as you create your .dat file.
When you want to create your monthly or yearly summary,
You could try a FILEALIAS
FILEALIAS /image/test.gif?*&rnd=* /image/test.gif?$1
That will work if rnd is always the last parameter. If it's not, try this
set of FILEALIASes (the order is important)
FILEALIAS /image/test.gif?*&rnd=*&* /image/test.gif?$1&$3
FILEALIAS /im
ested: 21
Distinct hosts served: 1
Aengus
On Tuesday, March 14, 2006 4:51 AM [EDT],
Brereton, Stephen <[EMAIL PROTECTED]> wrote:
.
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/
ll always returns a status of 1, you can just FILEEXCLUDE that
file. If it only does that sometimes, and you only want to exclude the times
it returns one, you can use the same technique as above, and create a
LOGFORMAT that wil
lled, there's a compiled version
of anlgform available:
http://analog.cx/helpers/index.html#form
(The link for MyAnalogForm, a slightly more elaborate front end for
anlgform, is no longer valid. But you can find a copy of it here:
http://www.markreutercon
;ll contribute it back to the community.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://ww
ok on the results analog produced it says this file was
> accessed 20 times. Talking a close look to the log you see it was just
> downloaded 5 times.
> Is there a way to determin the real count of downloads?
http://analo
On Tuesday, March 14, 2006 10:01 AM [EDT],
El Gringo <[EMAIL PROTECTED]> wrote:
> Thanks Aengus,
>
> could it be an idea to exclude the 206 code (EXCLUDECODE 206). I saw
> that normaly a 206 series is startet with a 200 (ok). I know this
> doesnt mean it was downloaded, b
e these hits
> from the report alltogether, much like FILEEXCLUDE.
You can BROWEXCLUDE the browser strings, inistead of ROBOTINCLUDEing them
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listin
8
200.htm and 304.htm are the only entries in the Request Report. 302.htm and
303.htm are listed in the Redirection Report. All 4 codes are listed in the
Status Report. The General Summary reads:
Successful requests: 2
Successful reques
ver any really
definitive answer provided by someone familiar with Helix:
http://lists.meer.net/pipermail/analog-help/2002-November/013677.html
http://lists.meer.net/pipermail/analog-help/2004-August/016823.html
http://lists.
of wildcards. FILEEXCLUDE *.js will
execlude all .js requests from your Analog reports.
If you're seeing .js entries in youe reports after using FILEEXCLUDE *.js,
run Analog with SETTINGS ON to see what other INCLUDES are over-riding
your exclude.
Aengus
+-
cs also for the other one. What am I missing or which
>> parameter should I add?
You haven't provided much information that would be useful in sorting out
your problem.
What commands are you using in the /eea
ave one for each "site").
Try adding SETTINGS ON, and see what files Analog thinks it is including and
excluding.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
st file which analog reads is the default configuration file,
normally called analog.cfg. You can stop this file being read by specifying
the option -G on the command line."
Aengus
+
| TO UNSUBSCRIBE from this list:
|http
file names, then you might need something more
general, like this:
FILEALIAS REGEXP:(.*)\+(.*)\+(.*)\+(.*)\+(.*) "$1%20$2%20$3%20$4%20$5"
(This will cope with multiple spaces. Unfortunately, it will turn any "real"
plus sign into a space too).
Aengus
+-
on just that file (FILEINCLUDE
/denstar+web/bailey11.html) and look at the status code report.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http
On Saturday, March 25, 2006 7:30 AM [EDT],
Robert D. <[EMAIL PROTECTED]> wrote:
> It is rumored that Aengus wrote:
>
> It is rumored that Aengus wrote:
>
>> I just added FAILLINKINCLUDE pages to my .cfg, and turned on the
>> failure report, and I get links.
&g
On Saturday, March 25, 2006 1:59 PM [EDT],
Robert D. <[EMAIL PROTECTED]> wrote:
> It is rumored that Aengus wrote:
>
>> As I've verified that it does work,
>
> Oh, I don't doubt for a moment that I have an incorrect setting
> somewhere.
>
>> try FAI
howing how users in general arrived at a
particular page, or where they went from any given page.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http:/
log file is generated by analog 5.21
??? Analog doesn't generate logfiles.
The logformat documentation contains information on creating your own
logformat - http://analog.cx/docs/logfmt.html . If you post the first two or
3 lines from your logfile, you
EXPI:NET+CLR+1*
> BROWEXCLUDE MsnBot*
> BROWEXCLUDE Psbot*
These lines will completely exclude all lines from those agents from all
reports - your Request Report won't include any request from these agents.
> ROBOTINCLUDE Googlebot/*
> ROBOTINCLUDE pBot/*
> ROBOTINCLUDE M
> "GET /cyclones/maps/ausmaps.htm HTTP/1.1"
"%j %r %j"
> 200
%c
> 62014
%b
>
"http://www.google.com.au/search?hl=en&q=tracking+cyclones&meta=cr%3Dcountry
> AU"
"%f"
> "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
&q
st.html turns up
http://www.wadsack.com/robot-list.html, which was generated a few days ago
Stephen, can you update the helpers page?
http://www.analog.cx/helpers/#conffiles
Aengus
+
| TO UNSUBSCRIBE from this list:
|
figfile.cfg but
> for some reason it doesn't work correctly thru the web app, but will
> run right from the command prompt is there anyway to specify a path?
+gc:\analog\Myconfigfile.cfg
Aengus
+
| TO UNSUBSCRIBE
some of both kinds), I might be able
to suggest some appropriate LOGFORMATS.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readm
OUT] %S- making %j: %r %j)
LOGFORMAT (%j)
logfile jboss.log
Note that I'm ignoring the query string, because I don't know what a
successful query string would look like, and I'm ignoring the line that
mentions a referrer, because it doesn't actually include a legal referrer.
C:\downloads\web_stats\web_stats\netcomputers_2006-wk02[1].log:
> ignoring it
> LOGFORMAT "%S %u%j[%d/%M/%Y:%h:%n:%j %j]%v%j%j%r%j%c%b"%f""%B"%j"
LOGFORMAT (%S %u %j [%d/%M/%Y:%h:%n:%j] %v %j "%j %r %j" %c %b "%f" "%B" %j)
Aengus
+-
son as to why analog would work
> perfectly on some log files and not at all on others. Has anyone had
> an experience like this? If so, is there to fix or go around it?
Write a vlid LOGFORMAT for your logfiles.
Aengus
+--
e Analog page. If you use the
bare IP number, you'll get a blank page.
Does your ISP use a proxy server? If so, it sounds like it might be badly
misconfigured. Can you bypass it?
> And does everyone else connect to and read from it
rom the site when I've read the 9th page, it'll have a "visit time" of
9 minutes. Utterly bogus.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
|
t Report (VHOST
ON), and Analog correctly reports the names of the virtual hosts ini your
log, then you should be able to VHOSTINCLUDE any of the hostnames in that
report, to get a report on that vhosts requests.
Aengus
+-
"
generates this "Web Trails" report:
=== Web trails ===
--- Referer -> Target common moves
* Total number of trails: 7
1)/sample3.html -> /sample4.html: 1
2)External Link -> /sample1.html: 1
3)Google -> /sample1.html: 1
4)/sample4.html -> /sample2.html:
> /prd/apache/webdocs/index_1.html,
%r,
> referer:
%j:
> http://www.thereferrer.com
%f
http://analog.cx/docs/logfmt.html
Anaalog will report thhat as a successful request, of course, not as a
failure, because it dosen't know anythhing about error logs.
Aengus
+
e to do so, it
would have to maintain large tables of information in memory, impacting
it's speed.
You can get the number of Hosts that access a single file by using
FILEINCLUDE xoops/imgs/259.gif
and counting the number of hosts in the Host Report. But that
uot;%j]"
because everything before the ] is junk.
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives:
all of the other reports, P and R are distinct measures - a host can
request both pages and non-pages, a folder can contain both pages and non
pages, a time period will contain requests for both pages and non-pages.
By the way, your errors.txt file should hhave included this message:
analog: Warning
r
certain requests.
If you have different requirements for different parts of your site, you may
need to create different reports for those different parts.
(It might be possible to create cache files for the two different sets and
combine them in a single report, but it's quite possible
but none of the
servers I'm working with have the type of traffic patterns that would really
benefit from a webtrails type of report. And the lack of flexibility in
Visitors makes it too hard to figure out what it's really doing)
Aengus
+
ret the line,
but I guess the auto-detect code breaks the line into tokens first, and
breaks tokens at spaces and ".
logformat (%S %j[%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b "%f" "%B")
will interpret the line properly.
Aengus
+---
IRECTORY ON
Note that if there are images in those directories, you may want to display
the Page count as well as the Request count -
http://analog.cx/docs/othreps.html#othCOLS
If you're still exploring Analog, it may be worthwhile trying ALL ON
You can tell Analog to ignore the arguments for a particular script with
ARGSEXCLUDE -
ARGSEXCLUDE /path/script.jsp
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog D
1001 - 1058 of 1058 matches
Mail list logo
