Chirouze:I'd give Splunk a try (since I have far less than 500MB per day), but I'm using an unsupported platform, that nasty old Windows 2000. Can I settle for a copy of your spreadsheet and macro instead? :-)
Mark Chirouze Olivier wrote:
Hi Mark, I suggest you have a look at Splunk (http://www.splunk.com/products/218) which will definitively do things you don't need, but probably do what you need, too ;-) I ended up creating an Excel macro to just play with logs, too. I can even provide it to you if you want! Olivier Olivier CHIROUZE I&0 Infrastructure Volvo Information Technology-----Original Message-----From: Mark A. Craig [mailto:mark.a.craig@xxxxxxxxx] Sent: 04 May 2007 08:58To: users@xxxxxxxxxxxxxxxxSubject: Re: Tools for better viewing Apache access logs?Yep, I've wound up finding and downloading nearly a dozen alleged log analyzers, but most of them seem to do things I don't want while not doing what I do want, which is a simple columnar display of the logs, perhaps with a few filtering or sorting choices. I actually screwed around with importing the log into Excel, which got me closer to what I want (at the moment) than any of those analyzers I've installed so far. One of them even made things MORE confused, because it functioned through the browser by hitting the server and adding dozens of new irrelevant hits to the Apache log. What's that old science cliche about the act of observation altering the subject? >:-(Mark Joshua Slive wrote:On 5/3/07, Mark A. Craig <mark.a.craig@xxxxxxxxx> wrote:Thanks again to those who helped me get past my BSODproblem and finallyput Apache to use. Now that I'm using it, I'm wonderingif there's sometool that exists to enhance and restructure the display ofinformationin Apache's access log? I'd like to view the log with ahostname andmore column-structured, in particular. The previousserver I was usingincluded hostnames and displayed everything inwell-ordered columns, andI found those to be a very helpful features. Is there aviewing utilityfor Apache that can display the log in (configurable) columns and resolve the IP addresses to hostnames and display those as well? That hostname feature was how I immediately knew when the U.S. government had been snooping on my blog: 150.148.0.27/wallwhale-pub.fda.gov. ;-)If you want to see what is happening on your server at a particular moment, check mod_status and the server-status handler.If you want to see hostnames, you'll need to turnHostnameLookups On,but that will have performance effects.If what you want is just to better analyze requests to yourserver ingeneral, you should use a log analysis tool. Try googlingfor "Apachelog analysis" and similar... Joshua.---------------------------------------------------------------------The official User-To-User support forum of the Apache HTTP Server Project.See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx---------------------------------------------------------------------The official User-To-User support forum of the Apache HTTP Server Project.See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx