Wednesday, 15 September 2010

logging - Could someone help me with the server log interpretation? -


I know what standard server log looks like, however, sometimes I get logs that make me a bit confused (I am analyzing data figures). For example:

www-phalcon2 66.249.78.168 - [20 / f / 2015: 23: 59: 59 +0100] 200 3251 4.6 9 0.001 192.168.64.125 3557 " GET /style/products.css?1414645533 http / 1.1 "" - "" - "" Mozilla / 5.0 (compatible; Googlebot / 2.1; +) "

belongs to the first IP client. But what about other people? What stands for "www.phalcon2" (in general)? Also, what are the two values ​​after the number of transferred bytes?

I am sure that such logs are easy to interpret, but I have done my research on the internet and I did not get the answer. Thanks for your help!

It looks like a W3C compatible log and is quite standard. The interesting thing about W3C formats is that they have a title where each line is before #. The file will look something like this:

  # warson: 1.0 # date: 12-January -1996 00:00:00 # field: time CS-method CS-Yury  < / Pre> 

If you can search flat for the rows starting with # (you may have to search all the time), then with the same source type you can get the definition as an example without the definition, You can not actually parse that log.

An option is believed to be an Apache custom log format (which is not usually the header). In this case you will have to ask for a logformatt or custom log configuration - this will give you a string called string - basically, a series of% elements that represent the format simultaneously. You can find.

I think the decimal number is the time taken for making requests in both seconds (% T round) and microsounds (% D - more precision). However, this is an estimate which is generally available in logging libraries - without the configuration or header information, you can not really say.


No comments:

Post a Comment