Highlighted
Absent Member.
Absent Member.
326 views

Web report for Sentinel Log Manager (or possilby RD)


Hi all,

My customer wants to replace Webtrend. So customers are given me a set
of
apache log files. They said based on those logs Webtrend could already
build
some useful web based report for their business units. From what I have
known,
what makes them useful are:

1) Those IP addresses could be resolved to domain, identifying the
source of
the browsers
2) URL are analyzed such that they could give a 'hit rate' based web
report for
trend analysis.
3) What browsers are used to view their web sites so they know the
compatibility
issues.


If I customize our report now, would it be possible to generate similar
reports for the above items?

1) I wonder if it is possible during the report generate, would some
other add-on java plug-in could work for the DNS resolution before data
generation?

2) Any one know the logic of the webtrend about how it correlates
various URL visited in the apache logs are considered different 'hit'?


3) I believe we could base on filter to identify different version of
the browsers used?


I don't have a webtrend so I could not compare and look at how they
generate reports from the apache log I have. Please let me know if
anyone has any idea about it.



Thanks,
Geoffrey


--
geocheng
------------------------------------------------------------------------
geocheng's Profile: http://forums.novell.com/member.php?userid=90913
View this thread: http://forums.novell.com/showthread.php?t=425354

0 Likes
4 Replies
Highlighted
Absent Member.
Absent Member.

Re: Web report for Sentinel Log Manager (or possilby RD)


Hi geocheng,

For (1): this feature already exists, although it's in a somewhat
experimental state. You need to install the Generic Hostname Resolution
Service Collector, and then enable hostname resolution for each
Collector (in this case, the Apache Collector).

For (2): I'm not sure what a "hit rate" is, but the Apache Collector
should give you a list of URLs that were visited and you should be able
to calculate counts per URL (split across the TargetDataName and
TargetDataContainer, note) using a SQL query or whatever.

For (3): I don't actually know what, if anything, the Apache Collector
does with the browser details; it may put that into the
ExtendedInformation field. You may wish to customize the Collector
slightly (this should be pretty easy to do) to copy that specific data
into a separate CV field; if you do that, then calculating the relative
frequency of hits from different browser types will again be a simple
COUNT style SQL query.

This is an interesting use case - we haven't really built much content
around the Apache Collector but as you are indicating, there might be
some simple things we can do that would be pretty useful. I'll take it
up as a potential project...


--
DCorlette
------------------------------------------------------------------------
DCorlette's Profile: http://forums.novell.com/member.php?userid=4437
View this thread: http://forums.novell.com/showthread.php?t=425354

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Web report for Sentinel Log Manager (or possilby RD)


Hi David,

1) So where could I get it and try it out?

2) Our apache collectors split the URL into different datacontexts. So
by default I have having details of visit to /cgi-bin, /something.js etc
and given a severity.
I am looking at the "Client URL" that means really refer to URL
visited.

3) Yes, it is all in the extendedinformation. "Client Browser=" is
what we can try to identify what browser it is used. I am trying to do
it by custom execution first and then look at the customization of a
collector.

Thanks..
Geoffrey


--
geocheng
------------------------------------------------------------------------
geocheng's Profile: http://forums.novell.com/member.php?userid=90913
View this thread: http://forums.novell.com/showthread.php?t=425354

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Web report for Sentinel Log Manager (or possilby RD)


I find the generic hostname collector from the plug-in site. Thanks!

Geoffrey


--
geocheng
------------------------------------------------------------------------
geocheng's Profile: http://forums.novell.com/member.php?userid=90913
View this thread: http://forums.novell.com/showthread.php?t=425354

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Web report for Sentinel Log Manager (or possilby RD)


> 1) So where could I get it and try it out?


Get what, exactly? The Apache HTTP Server Collector is available via
the content website.

> 2) Our apache collectors split the URL into different datacontexts.

So by default I have having details of visit to /cgi-bin, /something.js
etc and given a severity.
I am looking at the "Client URL" that means really refer to URL
visited.

Right, so if you simply concatenate TargetDataContainer and
TargetDataName together, you get the URL.

> 3) Yes, it is all in the extendedinformation. "Client Browser=" is

what we can try to identify what browser it is used. I am trying to do
it by custom execution first and then look at the customization of a
collector.

OK, so all you need to do is take a look at the existing Apache
Collector, determine what 'rec' attribute is used to hold the browser
information during parsing, and add a simple extension to 'custom.js' to
put that data into a separate, dedicated CV field.
If you need more info, check out the Customization section of the SDK
docs.

Thanks..
Geoffrey


--
DCorlette
------------------------------------------------------------------------
DCorlette's Profile: http://forums.novell.com/member.php?userid=4437
View this thread: http://forums.novell.com/showthread.php?t=425354

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.