Mailing List Archive: Analog: Help

Help on analog logging

Index | Next | Previous | View Threaded

aganguly01 at gmail

Aug 22, 2008, 4:15 AM

Post #1 of 6 (730 views)
Permalink

Help on analog logging

Hi All,
I am able to generate the reports properly using the Analog
analog-6.0.3-1.el3.i386.rpm on Red-Hat 3.0.
But some extension is required for my requirement

1)Under the File Size report I see the upper limit as 1KB-10KB, so how can I
increase the difference like 10KB -20KB.......?Is there any configuration
param for that?

2)Under the Host Failure report it shows top 20.How can I list all ?

3) Under the Host report it show top 50,How can I list all or increase the
limit?

4)Processing time also can we see all the intervals?

Thanks in advance.
Regards
Arnab

analog07 at eircom

Aug 22, 2008, 5:08 AM

Post #2 of 6 (683 views)
Permalink

Re: Help on analog logging [In reply to]

On 8/22/2008 7:15 AM, Arnab Ganguly wrote:
> Hi All,
> I am able to generate the reports properly using the Analog
> analog-6.0.3-1.el3.i386.rpm on Red-Hat 3.0.
> But some extension is required for my requirement
>
> 1)Under the File Size report I see the upper limit as 1KB-10KB, so how can I
> increase the difference like 10KB -20KB.......?Is there any configuration
> param for that?

If you're seeing an upper limit of 10KB, it's because you don't have any
requests for files greater than 10KB. If there's a request for a file of
20KB, it;'ll be counted in the 10-100KB "bucket".

The only way to change the size of the "buckets" is to modify the Analog
source code and recompile.

> 2)Under the Host Failure report it shows top 20.How can I list all ?
>
> 3) Under the Host report it show top 50,How can I list all or increase the
> limit?

http://analog.cx/docs/faq.html#faq114

There are "floors" for each report. You can change the number of lines
displayed in the Host Failure Report by changing the FAILHOSTFLOOR, and
you can change the number of entries in the Host Report by changing the
HOSTFLOOR.

http://analog.cx/docs/othreps.html#FLOOR

> 4)Processing time also can we see all the intervals?

As far as I know, there is no floor for the Processing Time Report - if
there's a processing time in the log entry, it will be counted in the
appropriate "bucket". The Processing Time report uses a set of "buckets"
(1-2, 2-5, 5-10, 10-20, 20-60, 60-120, 120-300, 300-600, etc). There are
no configuration options for these buckets - you would have to change
the source code to change the "bucket" sizes.

Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

aganguly01 at gmail

Aug 22, 2008, 5:49 AM

Post #3 of 6 (683 views)
Permalink

Re: Help on analog logging [In reply to]

Very much appreciated for such a prompt help.
Regards
Arnab

On Fri, Aug 22, 2008 at 5:38 PM, Aengus <analog07[at]eircom.net> wrote:

> On 8/22/2008 7:15 AM, Arnab Ganguly wrote:
>
>> Hi All,
>> I am able to generate the reports properly using the Analog
>> analog-6.0.3-1.el3.i386.rpm on Red-Hat 3.0.
>> But some extension is required for my requirement
>>
>> 1)Under the File Size report I see the upper limit as 1KB-10KB, so how can
>> I
>> increase the difference like 10KB -20KB.......?Is there any configuration
>> param for that?
>>
>
> If you're seeing an upper limit of 10KB, it's because you don't have any
> requests for files greater than 10KB. If there's a request for a file of
> 20KB, it;'ll be counted in the 10-100KB "bucket".
>
> The only way to change the size of the "buckets" is to modify the Analog
> source code and recompile.
>
> 2)Under the Host Failure report it shows top 20.How can I list all ?
>>
>> 3) Under the Host report it show top 50,How can I list all or increase
>> the
>> limit?
>>
>
> http://analog.cx/docs/faq.html#faq114
>
> There are "floors" for each report. You can change the number of lines
> displayed in the Host Failure Report by changing the FAILHOSTFLOOR, and you
> can change the number of entries in the Host Report by changing the
> HOSTFLOOR.
>
> http://analog.cx/docs/othreps.html#FLOOR
>
> 4)Processing time also can we see all the intervals?
>>
>
> As far as I know, there is no floor for the Processing Time Report - if
> there's a processing time in the log entry, it will be counted in the
> appropriate "bucket". The Processing Time report uses a set of "buckets"
> (1-2, 2-5, 5-10, 10-20, 20-60, 60-120, 120-300, 300-600, etc). There are no
> configuration options for these buckets - you would have to change the
> source code to change the "bucket" sizes.
>
> Aengus
> +------------------------------------------------------------------------
> | TO UNSUBSCRIBE from this list:
> | http://lists.meer.net/mailman/listinfo/analog-help
> |
> | Analog Documentation: http://analog.cx/docs/Readme.html
> | List archives: http://www.analog.cx/docs/mailing.html#listarchives
> | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
> +------------------------------------------------------------------------
>

aganguly01 at gmail

Aug 22, 2008, 6:21 AM

Post #4 of 6 (684 views)
Permalink

Re: Help on analog logging [In reply to]

Hi,
I have checked my access log entry there are requests more than 10kb but it
is not reported.Is it the 10KB max by default?Let me know
Thanks
Arnab

On Fri, Aug 22, 2008 at 5:38 PM, Aengus <analog07[at]eircom.net> wrote:

> On 8/22/2008 7:15 AM, Arnab Ganguly wrote:
>
>> Hi All,
>> I am able to generate the reports properly using the Analog
>> analog-6.0.3-1.el3.i386.rpm on Red-Hat 3.0.
>> But some extension is required for my requirement
>>
>> 1)Under the File Size report I see the upper limit as 1KB-10KB, so how can
>> I
>> increase the difference like 10KB -20KB.......?Is there any configuration
>> param for that?
>>
>
> If you're seeing an upper limit of 10KB, it's because you don't have any
> requests for files greater than 10KB. If there's a request for a file of
> 20KB, it;'ll be counted in the 10-100KB "bucket".
>
> The only way to change the size of the "buckets" is to modify the Analog
> source code and recompile.
>
> 2)Under the Host Failure report it shows top 20.How can I list all ?
>>
>> 3) Under the Host report it show top 50,How can I list all or increase
>> the
>> limit?
>>
>
> http://analog.cx/docs/faq.html#faq114
>
> There are "floors" for each report. You can change the number of lines
> displayed in the Host Failure Report by changing the FAILHOSTFLOOR, and you
> can change the number of entries in the Host Report by changing the
> HOSTFLOOR.
>
> http://analog.cx/docs/othreps.html#FLOOR
>
> 4)Processing time also can we see all the intervals?
>>
>
> As far as I know, there is no floor for the Processing Time Report - if
> there's a processing time in the log entry, it will be counted in the
> appropriate "bucket". The Processing Time report uses a set of "buckets"
> (1-2, 2-5, 5-10, 10-20, 20-60, 60-120, 120-300, 300-600, etc). There are no
> configuration options for these buckets - you would have to change the
> source code to change the "bucket" sizes.
>
> Aengus
> +------------------------------------------------------------------------
> | TO UNSUBSCRIBE from this list:
> | http://lists.meer.net/mailman/listinfo/analog-help
> |
> | Analog Documentation: http://analog.cx/docs/Readme.html
> | List archives: http://www.analog.cx/docs/mailing.html#listarchives
> | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
> +------------------------------------------------------------------------
>

analog07 at eircom

Aug 22, 2008, 7:07 AM

Post #5 of 6 (684 views)
Permalink

Re: Help on analog logging [In reply to]

On 8/22/2008 9:21 AM, Arnab Ganguly wrote:
> Hi,
> I have checked my access log entry there are requests more than 10kb but it
> is not reported.Is it the 10KB max by default?Let me know

No, it's not the max. Pick out a couple of lines from your logfile that
you think should be causing a higher entry in the filesize report, and
run Analog against just those lines. If the results don't make sense,
post the lines here and see if other people get the same results.

Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

aganguly01 at gmail

Aug 25, 2008, 12:32 AM

Post #6 of 6 (665 views)
Permalink

Re: Help on analog logging [In reply to]

Hi All,
I am attaching the result what I got and the access log entires is being
posted below.The highlighted are the one containing file size or the content
length more than 100KB in the request.I want the output report should show
me which are the requests was more than 10KB-100KB which I don't see in the
report.

97.104.33.242 - - [20/Aug/2008:23:17:58 -0400] "POST
/spiral-bin/Collector.dll HTTP/1.0" "Transaction time in Sec= 2" "Bytes
received = 195910" 200 117
2 71.245.161.74 - - [20/Aug/2008:23:18:05 -0400] "POST
/spiral-bin/Collector.dll HTTP/1.0" "Transaction time in Sec= 1" "Bytes
received = 101246" 200 6918
3 69.122.34.29 - - [20/Aug/2008:23:18:23 -0400] "POST
/spiral-bin/Collector.dll HTTP/1.0" "Transaction time in Sec= 6" "Bytes
received = 433454" 200 117
11 141.158.214.52 - - [20/Aug/2008:23:18:37 -0400] "POST
/spiral-bin/Collector.dll HTTP/1.0" "Transaction time in Sec= 1" "Bytes
received = 325" 200 60
12 68.52.158.218 - - [20/Aug/2008:23:18:38 -0400] "POST
/spiral-bin/Collector.dll HTTP/1.0" "Transaction time in Sec= 0" "Bytes
received = 262" 200 124

In the configuration file this line is being put to parse the access log
APACHELOGFORMAT (%h %l %u %t \"%r\" \"Transaction time in Sec= %T\" \"Bytes
received = %I\" %>s %b)
Thanks in advance.
Regards
Arnab

On Fri, Aug 22, 2008 at 7:37 PM, Aengus <analog07[at]eircom.net> wrote:

> On 8/22/2008 9:21 AM, Arnab Ganguly wrote:
>
>> Hi,
>> I have checked my access log entry there are requests more than 10kb but
>> it
>> is not reported.Is it the 10KB max by default?Let me know
>>
>
> No, it's not the max. Pick out a couple of lines from your logfile that you
> think should be causing a higher entry in the filesize report, and run
> Analog against just those lines. If the results don't make sense, post the
> lines here and see if other people get the same results.
>
>
> Aengus
> +------------------------------------------------------------------------
> | TO UNSUBSCRIBE from this list:
> | http://lists.meer.net/mailman/listinfo/analog-help
> |
> | Analog Documentation: http://analog.cx/docs/Readme.html
> | List archives: http://www.analog.cx/docs/mailing.html#listarchives
> | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
> +------------------------------------------------------------------------
>

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com