bclanton at dupagels
Aug 11, 2008, 10:54 AM
Post #4 of 5
(938 views)
Permalink
|
When I use the User Report for identifying local verses proxy users, I only
get a readout of the proxy users, not local. I've played with some of the
FLOOR commands as they apply to the User report, but I cannot get Analog to
recogize the "local" requests in the log file. The floor command that would
seem to apply is:
USERFLOOR 1r
Which to me would mean "List all users with at least 1 request"
My logformat command is
APACHELOGFORMAT (%u %h %l %w %t "%r" %s %b)
Any input would be appreciated
Brian Clanton
mailto:bclanton [at] dupagels
Systems Technician
Dupage Library System
http://www.dupagels.lib.il.us
127 South First Street
Geneva IL, 60134
Voice/Voicemail (630) 232-8457 Ext. 210
Fax: (630) 232 0699
Automation Department direct line:
Voice/Voicemail (630) 232-4674
> -----Original Message-----
> From: analog-help-bounces [at] lists
> [mailto:analog-help-bounces [at] lists] On Behalf Of Aengus
> Sent: Friday, August 01, 2008 5:00 PM
> To: Support for analog web log analyzer
> Subject: Re: [analog-help] Special Organisation Report
>
> Brian Clanton <bclanton [at] dupagels> wrote:
> > I have two types of log files for a Proxy Server that I am
> anylyzing
> > with Analog:
> >
> > local 75.149.219.73 - - [18/Jul/2008:13:58:19 -0600] "GET
> > http://infotrac.galegroup.com/itweb/caro83221?id=caro83221&db=LitRC
> > HTTP/1.1" 301 555
> > proxy 67.167.91.241 - fGKzhzjLu6flE6G [18/Jul/2008:14:33:07 -0600]
> > "GET http://mldv.permissiontv.com/channels/carol_il HTTP/1.1" 200 0
> >
> > The logs can either "local" or "proxy". This designates whether or
> > not a request is coming from inside of an IP range or
> outside of an IP
> > range.
> >
> > My question is....
> >
> > How can I get a report within the Organisations Report to
> tell me how
> > many requests are internal, "local" and how many are
> remote, "proxy"?
>
> I'm not sure what you mean by "a report within the
> Organisations Report" but you can use one of the reports that
> you aren't currently using, and "hijack" it's field to report
> on how often a specific term turns up in that field.
>
> For instance, if you're not using the User Report, you can
> create a logformat with %u in the first field, turn on the
> User Report, and it will show you how many request were made
> by the user "local" and how many were made by the user "proxy".
>
> If you are using the User Report already, you can also
> repurpose the Virtual Host report in the same way. (You might
> be able to do something with the Browser Report too).
>
> Aengus
>
> +-------------------------------------------------------------
> ----------
> +-
> | TO UNSUBSCRIBE from this list:
> | http://lists.meer.net/mailman/listinfo/analog-help
> |
> | Analog Documentation: http://analog.cx/docs/Readme.html List
> | archives: http://www.analog.cx/docs/mailing.html#listarchives
> | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
> +-------------------------------------------------------------
> ----------
> +-
>
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
|
