Page 1 of 1

how to analyze log

Posted: Fri Jul 12, 2002 7:22 pm
by godfrey
I used to be able to run a number of diferent log analyzers to decifer the log now the format changed and I can't figure out how to do it.

can someone tell me how to set analyzer or give me a hint as to what windows based program can do this.

here is a sample line of my log file

"141.203.95.58" "XY8932" "[01/Jun/2002:00:00:43 +0000]" "GET" "/usr/local/www/data/mysite.com/users/me/web/popup.php" "?f=1" "HTTP/1.1" "200" "729" "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)"

Posted: Fri Jul 12, 2002 7:42 pm
by gnu2php
Microsoft Access can do it. Use the "Import Table" wizard to load a text file. If you want, I can guide you through the process--if you have MS Access 7.0.

Posted: Fri Jul 12, 2002 8:03 pm
by godfrey
gnu2php wrote:Microsoft Access can do it. Use the "Import Table" wizard to load a text file. If you want, I can guide you through the process--if you have MS Access 7.0.
please do, I have access 2000

Posted: Fri Jul 12, 2002 9:21 pm
by gnu2php
The main thing is to make sure the imported fields are delimited by space, not by comma.

Here's how it's done in Access 7.0 (it might be different in Access 2000):
  • 1. Create a new database (or load an existing one)

    2. Select the "Tables" tab (it may already be selected)

    3. Click "New"

    4. Select "Import Table" and press OK

    5. On "Files of type," select "Text files"

    6. Open the desired text file

    [The "Text Import Wizard" should now come up]

    7. Click "Advanced"

    8. For "Field Delimiter" select {space}

    9. For "Text Qualifier" select " (a quotation mark)

    10. Click "OK"

    11. Click "Finish"

thats nice!

Posted: Fri Jul 12, 2002 10:20 pm
by shareme
Thats nice I never thought to use MS Aceess

Posted: Sat Jul 13, 2002 12:47 am
by gnu2php
Just a thought-- :idea:

You mentioned at the beginning of your post:
I used to be able to run a number of diferent log analyzers to decifer the log now the format changed and I can't figure out how to do it.
If you export the table from Access, you might be able to get it in the original format that the analyzer programs can recognize. You may need to alter a few settings though (such as setting the delimiter to be a "tab" character, or changing the "Text Qualifier" to something else), and then delete the headings that Access puts at the top of the exported file, if necessary.

I suggest that you study the original format to see what the correct format is, and then with MS Access, try to match the pattern by exporting the table.

Does that Make Sense?