[cobalt-users] [RaQ3] Log Files: 101

[Liz <daldog@xxxxxxxx>]

Trying to understand all of these different logs are so I can future 
customize Analog v4.xx to report specific info on certail virtual 
sites.  Hoping someone in the list can drop a few more clues as to what the 
difference is between the various log files which Cobalt has dumping into 
virtual site's /logs directories and in /home/log/httpd.  I'm not sure if 
I'm understanding all this correctly, altho am understanding the "normal" 
types of traditional Apache logs.  Sure would be nice if there was a level 
of consistancy of logformats across on the server!

The main "access" log is only recording 1 day's worth (AFAK).
After running a custom config'd Analog on the "access" log it doesn't do me 
much good to read just 1 day's worth of statistics...maybe someday there 
will be some use for this, altho I'm doubtful.

As far as the individual virtual sites goes, info in "web.log", I realize 
that this get's reset after it hits a certain size, and I'm assuming that 
the compressed .gz counterpart is also being reset under the same 
conditions...correct?

What's the deal with the "web.cache" and "web.cache.new" files??
I can't make heads or tails out of what all of those columns are suppose to 
represent.  Special type of database and what database is reading it?

Btw, if anyone's interested, I monkey'd around with various logformats for 
the "access" log so Analog could finally understand it, and I would know 
what was contain in that file, so the proper logformat for reading this one 
in (least in Analog) is:

(%v %S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B")

But the "web.log" doesn't use this same format. (hmm, not surprised!)

Cobalt GUI "site user" stats are still worthless, IMO.  A while ago someone 
asked about the repeated domains in the "Reports to Generate".  Yep, the 
large majority of virtual sites are listed up to 3 times for web, ftp and 
mail for each site in the Selection box:
www.domain.com  (listed 3 times)
www.domain.com FTP  (also 3 times)
www.domain.com mail   (dito!)

TIA
Liz