oldlog2new(8) [debian man page]

oldlog2new(8)						      System Manager's Manual						     oldlog2new(8)

NAME

       oldlog2new - Convert an NCSA httpd 1.1 access_log file to CLF access_log

SYNOPSIS

       oldlog2new [ -hez ] [ -f logfile ] [ -s srmfile ]

DESCRIPTION

       Convert an NCSA httpd 1.1 access_log file to CLF access_log

OPTIONS

       Display Options:
	 -h  Help -- just display this message and quit.
	 -e  Display all invalid log entries on STDERR. (default is to ignore
	     them)

       Input Options:
	 -f  Read from the following access_log file instead of the default.
	 -z  Use zcat to uncompress the log file while reading [requires -f].
	 -s  Get the server directives from the following srm.conf file.

SEE ALSO

       crontab(1), httpd(1m), perl(1), wwwstat(1), splitlog(1), monthly(8), oldlog2new(8)

       More info and the latest version of oldlog2new can be obtained from

	    http://www.ics.uci.edu/pub/websoft/wwwstat/
	     ftp://www.ics.uci.edu/pub/websoft/wwwstat/

       If you have any suggestions, bug reports, fixes, or enhancements, please join the <wwwstat-users@ics.uci.edu> mailing list by sending e-
       mail with "subscribe" in the subject of the message to the request address <wwwstat-users-request@ics.uci.edu>.	The list is archived at
       the above address.

								 18 November 2004						     oldlog2new(8)

MERGELOGS(1)						      General Commands Manual						      MERGELOGS(1)

NAME

       mergelogs - merge and consolidate web server logs

SYNOPSIS

       mergelogs -p penlog [-c] [-d] [-j jitter] [-t seconds] server1:logfile1 [server2:logfile2 ...]

EXAMPLES

       mergelogs -p pen.log 10.0.0.1:access_log.1 10.0.0.2:access_log.2

       mergelogs -p pen.log 10.0.18.6:access_log-10.0.18.6 10.0.18.8:access_log-10.0.18.8

DESCRIPTION

       When pen is used to load balance web servers, the web server log file lists all accesses as coming from the host running pen. This makes it
       more difficult to analyze the log file.

       To solve this, pen creates its own log file, which contains the real client address, the time of the access, the target server address  and
       the first few bytes of the requests.

       Mergelogs reads pen's log file and the log files of all load balanced web servers, compares each entry and creates a combined log file that
       looks as if the web server cluster were a single physical server.  Client addresses are replaced with the real client addresses.

       In the event that no matching client address can be found in the pen log, the server address is used instead. This should never happen, and
       is  meant  as  a debugging tool. A large number of these indicates that the server system date needs to be set, or that the jitter value is
       too small.

       You probably don't want to use this program. Penlog is a much more elegant and functional solution.

OPTIONS

       -c     Do not cache pen log entries. The use of this option is not recommended, as it will make mergelogs search the  entire  pen  log  for
	      every line in the web server logs.

       -d     Debugging (repeat for more).

       -p penlog
	      Log file from pen.

       -j jitter
	      Jitter  in  seconds (default 600). This is the maximum variation in time stamps in the pen and web server log files. A smaller value
	      will result in a smaller pen log cache and faster processing, at the risk of missed entries.

       -t seconds
	      The difference in seconds between the time on the pen server and UTC.  For example, this is 7200 (two hours) in Finland.

       server:logfile
	      Web server address and name of log file.

AUTHOR

       Copyright (C) 2001-2003 Ulric Eriksson, <ulric@siag.nu>.

SEE ALSO

       pen(1), webresolve(1), penlog(1), penlogd(1)

								       LOCAL							      MERGELOGS(1)