Mailing List Archive

To get IP addresses turn on the Host Report. However, the Organisation
Report may be more useful as it aggregates C- and B-class subnets. Or the
Domain report, if you want to know what ISP's or companies your visitors are
coming from. To get that information, you'll have to enable DNS lookups. See
these references:

http://analog.cx/docs/dns.html
http://analog.cx/docs/reports.html#repoth

--
Jeremy Wadsack

On Mon, Jun 22, 2009 at 3:09 PM, Rogers, Steve I. <SRogers@atpco.net> wrote:

> In a previous thread, user Aengus mentioned that “
>
>
>
> you can get a list of all the Users (IP addresses or UserIDs) that accessed
> a single page”
>
>
>
> How would I get that report from Analog? I turned on the User report but I
> only get a list of Users and the number of requests they made.
>
>
>
> Thanks very much.
>
>
>
> Steve Rogers
>
> Internal Consultant Network and Security
>
> Airline Tariff Publishing Company
>
> 45005 Aviation Drive,
>
> Dulles, VA 20166
>
> Tel. 703-471-7510
>
> email: srogers@atpco.net
>
>
>
> "Fools ignore complexity. Pragmatists suffer it. Geniuses remove it!" --
> Alam Perlis
>
> +------------------------------------------------------------------------
> | TO UNSUBSCRIBE from this list:
> | http://lists.meer.net/mailman/listinfo/analog-help
> |
> | Analog Documentation: http://analog.cx/docs/Readme.html
> | List archives: http://www.analog.cx/docs/mailing.html#listarchives
> | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
> +------------------------------------------------------------------------
>
>


--
Jeremy Wadsack

Rogers, Steve I. <SRogers@atpco.net> wrote:
> In a previous thread, user Aengus mentioned that "
>
> you can get a list of all the Users (IP addresses or UserIDs) that
> accessed a single page"
>
> How would I get that report from Analog? I turned on the User report
> but I only get a list of Users and the number of requests they made.

When you do

FILEINCLUDE /page1.html

Analog will create a report ignores everything except requests for that item (as long as that's the only include/exclude command), so therefore the HOST Report and the USER report will be just about who visited that specific page. By the same token, if you do USERINCLUDE Userxxx, the Analog report will ignore all log entries except the requests from Userxxx.

This is usually only useful in small doses - you can only create these "targetted" reports one at a time, so this is useful for debugging, or tracking down a specific issue, rather than for seeing bigger trends.

Aengus

+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Aengus,
Thanks very much for your prompt response. However, what I am looking
for is the "bigger trends". I have a PDF directory and I my customer
wants to know which users are accessing those PDF documents. The
information is in the HTTP log file as shown here, where xxxxxxx
represents the Userid:

nnn.24.32.38 - xxxxxxx [22/Jun/2009:00:07:05 +0400] "GET
/ffffffff/coresystems/pdf/cat9_k.pdf HTTP/1.0" 200 79123

Is there a way to get a report that shows all users accessing any of the
documents in that PDF directory?

Thanks.

Steve Rogers

-----Original Message-----
From: analog-help-bounces@lists.meer.net
[mailto:analog-help-bounces@lists.meer.net] On Behalf Of Aengus
Sent: Monday, June 22, 2009 6:35 PM
To: Support for analog web log analyzer
Subject: Re: [analog-help] Analog user Reports

Rogers, Steve I. <SRogers@atpco.net> wrote:
> In a previous thread, user Aengus mentioned that "
>
> you can get a list of all the Users (IP addresses or UserIDs) that
> accessed a single page"
>
> How would I get that report from Analog? I turned on the User report
> but I only get a list of Users and the number of requests they made.

When you do

FILEINCLUDE /page1.html

Analog will create a report ignores everything except requests for that
item (as long as that's the only include/exclude command), so therefore
the HOST Report and the USER report will be just about who visited that
specific page. By the same token, if you do USERINCLUDE Userxxx, the
Analog report will ignore all log entries except the requests from
Userxxx.

This is usually only useful in small doses - you can only create these
"targetted" reports one at a time, so this is useful for debugging, or
tracking down a specific issue, rather than for seeing bigger trends.

Aengus

+-----------------------------------------------------------------------
-
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+-----------------------------------------------------------------------
-


+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Hello Jeremy,

Thanks very much but I already have both the Host Report and the
Organization report. What I am trying to get is a list of all users who
are accessing any document in my PDF directory - not just one specific
document.



Best regards,



Steve Rogers



From: analog-help-bounces@lists.meer.net
[mailto:analog-help-bounces@lists.meer.net] On Behalf Of Jeremy Wadsack
Sent: Monday, June 22, 2009 6:21 PM
To: Support for analog web log analyzer
Subject: Re: [analog-help] Analog user Reports



To get IP addresses turn on the Host Report. However, the Organisation
Report may be more useful as it aggregates C- and B-class subnets. Or
the Domain report, if you want to know what ISP's or companies your
visitors are coming from. To get that information, you'll have to enable
DNS lookups. See these references:

http://analog.cx/docs/dns.html
http://analog.cx/docs/reports.html#repoth

--
Jeremy Wadsack

On Mon, Jun 22, 2009 at 3:09 PM, Rogers, Steve I. <SRogers@atpco.net>
wrote:

In a previous thread, user Aengus mentioned that "



you can get a list of all the Users (IP addresses or UserIDs) that
accessed a single page"



How would I get that report from Analog? I turned on the User report
but I only get a list of Users and the number of requests they made.



Thanks very much.



Steve Rogers

Internal Consultant Network and Security

Airline Tariff Publishing Company

45005 Aviation Drive,

Dulles, VA 20166

Tel. 703-471-7510

email: srogers@atpco.net



"Fools ignore complexity. Pragmatists suffer it. Geniuses remove it!"
-- Alam Perlis


+-----------------------------------------------------------------------
-
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+-----------------------------------------------------------------------
-




--
Jeremy Wadsack

On 6/23/2009 8:37 AM, Rogers, Steve I. wrote:
> Aengus,
> Thanks very much for your prompt response. However, what I am looking
> for is the "bigger trends". I have a PDF directory and I my customer
> wants to know which users are accessing those PDF documents. The
> information is in the HTTP log file as shown here, where xxxxxxx
> represents the Userid:
>
> nnn.24.32.38 - xxxxxxx [22/Jun/2009:00:07:05 +0400] "GET
> /ffffffff/coresystems/pdf/cat9_k.pdf HTTP/1.0" 200 79123
>
> Is there a way to get a report that shows all users accessing any of the
> documents in that PDF directory?

FILEINCLUDE /ffffffff/coresystems/pdf/*

will generate a report for just that directory - ant requests for
documents outside that PDF directory will be ignored.

(The first INCLUDE command does and implicit EXCLUDE * first, so if you
have other INCLUDE or EXCLUDE commands in your config, you may need to
tweak things a bit).

http://analog.cx/docs/include.html

Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Thanks for your response. I was out of the office for a few days.

I have been experimenting with the FILEINCLUDE option and the USER
reports. While the FILEINCLUDE does restrict the report to only files
in the PDF directory, and the USER report shows me a list of users, I am
unable to get a consolidated report that shows me which a correlation
between a USER and the specific files they accessed. Is that even
possible with Analog?

I am looking for a report that would show something like the following:

User Files accessed
Xxxxxx /ffffff/pdf/data1.pdf
/ffffff/pdf/data2.pdf
/ffffff/pdf/data3.pdf

yyyyyyy /ffffff/pdf/data1.pdf
/ffffff/pdf/data5.pdf
/ffffff/pdf/data6.pdf


Or
Files accessed Users
/ffffff/pdf/data1.pdf Xxxxxx, Yyyyyy, uuuuuuu
/ffffff/pdf/data2.pdf xxxxxx
/ffffff/pdf/data3.pdf Wwwwwww, yyyyyyyy


Steve Rogers
-----Original Message-----
From: analog-help-bounces@lists.meer.net
[mailto:analog-help-bounces@lists.meer.net] On Behalf Of Aengus
Sent: Tuesday, June 23, 2009 9:55 AM
To: Support for analog web log analyzer
Subject: Re: [analog-help] Analog user Reports

On 6/23/2009 8:37 AM, Rogers, Steve I. wrote:
> Aengus,
> Thanks very much for your prompt response. However, what I am looking
> for is the "bigger trends". I have a PDF directory and I my customer
> wants to know which users are accessing those PDF documents. The
> information is in the HTTP log file as shown here, where xxxxxxx
> represents the Userid:
>
> nnn.24.32.38 - xxxxxxx [22/Jun/2009:00:07:05 +0400] "GET
> /ffffffff/coresystems/pdf/cat9_k.pdf HTTP/1.0" 200 79123
>
> Is there a way to get a report that shows all users accessing any of
the
> documents in that PDF directory?

FILEINCLUDE /ffffffff/coresystems/pdf/*

will generate a report for just that directory - ant requests for
documents outside that PDF directory will be ignored.

(The first INCLUDE command does and implicit EXCLUDE * first, so if you
have other INCLUDE or EXCLUDE commands in your config, you may need to
tweak things a bit).

http://analog.cx/docs/include.html

Aengus
+-----------------------------------------------------------------------
-
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+-----------------------------------------------------------------------
-


+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Hello Aengus,
I just went back and re-read your post from August 21, 2008 where
someone else appears to ask the same question. From your response, it
appears that what I am asking for is not possible as a single report.

Thanks very much for your help anyway.

Steve Rogers

-----Original Message-----
From: Rogers, Steve I.
Sent: Monday, June 29, 2009 4:59 PM
To: 'Support for analog web log analyzer'
Subject: RE: [analog-help] Analog user Reports

Thanks for your response. I was out of the office for a few days.

I have been experimenting with the FILEINCLUDE option and the USER
reports. While the FILEINCLUDE does restrict the report to only files
in the PDF directory, and the USER report shows me a list of users, I am
unable to get a consolidated report that shows me which a correlation
between a USER and the specific files they accessed. Is that even
possible with Analog?

I am looking for a report that would show something like the following:

User Files accessed
Xxxxxx /ffffff/pdf/data1.pdf
/ffffff/pdf/data2.pdf
/ffffff/pdf/data3.pdf

yyyyyyy /ffffff/pdf/data1.pdf
/ffffff/pdf/data5.pdf
/ffffff/pdf/data6.pdf


Or
Files accessed Users
/ffffff/pdf/data1.pdf Xxxxxx, Yyyyyy, uuuuuuu
/ffffff/pdf/data2.pdf xxxxxx
/ffffff/pdf/data3.pdf Wwwwwww, yyyyyyyy


Steve Rogers
-----Original Message-----
From: analog-help-bounces@lists.meer.net
[mailto:analog-help-bounces@lists.meer.net] On Behalf Of Aengus
Sent: Tuesday, June 23, 2009 9:55 AM
To: Support for analog web log analyzer
Subject: Re: [analog-help] Analog user Reports

On 6/23/2009 8:37 AM, Rogers, Steve I. wrote:
> Aengus,
> Thanks very much for your prompt response. However, what I am looking
> for is the "bigger trends". I have a PDF directory and I my customer
> wants to know which users are accessing those PDF documents. The
> information is in the HTTP log file as shown here, where xxxxxxx
> represents the Userid:
>
> nnn.24.32.38 - xxxxxxx [22/Jun/2009:00:07:05 +0400] "GET
> /ffffffff/coresystems/pdf/cat9_k.pdf HTTP/1.0" 200 79123
>
> Is there a way to get a report that shows all users accessing any of
the
> documents in that PDF directory?

FILEINCLUDE /ffffffff/coresystems/pdf/*

will generate a report for just that directory - ant requests for
documents outside that PDF directory will be ignored.

(The first INCLUDE command does and implicit EXCLUDE * first, so if you
have other INCLUDE or EXCLUDE commands in your config, you may need to
tweak things a bit).

http://analog.cx/docs/include.html

Aengus
+-----------------------------------------------------------------------
-
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+-----------------------------------------------------------------------
-


+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------