Understanding the site analysis log

Understanding the site analysis log

The WebSphere Portal site analysis log is:
/wp_root/log/sa_date_time.log

where wp_root is the WebSphere Portal root directory and date_time is the date and time the file was created. The current (active) log file is named sa.log. As explained in the previous section, the dateFormat parameter determines the interval at which the file is created.
The site analysis log uses the NCSA Combined log format, which is a combination of NCSA Common log format and three additional fields: the referrer field, the user_agent field, and the cookie field. The following example displays a sample entry in the site analysis log. The table describes each field of the log format:
9.37.3.88 - customer2 [10/Apr/2002:21:33:16 +0000] "GET /Portlet/146/Welcome_Portlet?PortletPID=146&PortletMode=View&PortletState=Normal HTTP/1.1" 200 -1 "http://myserver.company.com/Page/110/Welcome" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)" "JSESSIONID=OXDFAPVR4SXYZOIHSLVGA2Y"

Field in the Example Log Field Name and Explanation
9.37.3.88 host The IP address of the HTTP client that sent the request
- rcf931 The identifier used to identify the client making the request. If the client identifier is not known, the field is set to the the hyphen character ( - ).
customer2 username The user ID for the client. If the user ID is not known, the field is set to the the hyphen character ( - ).
[10/APR/2002:21:33:16 +0000] date:time: timezone The date and time of the HTTP request.

"GET /Portlet/146/Welcome_Portlet? PortletMode= View&PortletState= Normal HTTP/1.1"
request The HTTP method, the URL of the requested resource and the version of HTTP used by the client.
200 statuscode The HTTP status code for the request.
-1 bytes The number of bytes of data transferred from the client as part of the request. A value of -1 means unknown.
"http://myserver.company.com/Page/110/Welcome" referrer The URL that linked the client to the Web site. For some requests, the referrer might not be logged. In such cases, the field is set to empty double quotes: ""
"Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)" user_agent The type of Web browser used by the client.
"JSESSIONID=OXDFAPVR4SXYZOIHSLVGA2Y" cookies The name and value of a cookie that was sent to the client browser. If multiple cookies were sent, the list is delimited by the semicolon character.

Next steps

You have completed this step. Continue to the next step by choosing one of the following topics:

See also

Usage reports
Site analysis

Home |

WebSphere is a trademark of the IBM Corporation in the United States, other countries, or both.

IBM is a trademark of the IBM Corporation in the United States, other countries, or both.

Field in the Example	Log Field Name and Explanation
9.37.3.88	host The IP address of the HTTP client that sent the request
-	rcf931 The identifier used to identify the client making the request. If the client identifier is not known, the field is set to the the hyphen character ( - ).
customer2	username The user ID for the client. If the user ID is not known, the field is set to the the hyphen character ( - ).
[10/APR/2002:21:33:16 +0000]	date:time: timezone The date and time of the HTTP request.
"GET /Portlet/146/Welcome_Portlet? PortletMode= View&PortletState= Normal HTTP/1.1"	request The HTTP method, the URL of the requested resource and the version of HTTP used by the client.
200	statuscode The HTTP status code for the request.
-1	bytes The number of bytes of data transferred from the client as part of the request. A value of -1 means unknown.
"http://myserver.company.com/Page/110/Welcome"	referrer The URL that linked the client to the Web site. For some requests, the referrer might not be logged. In such cases, the field is set to empty double quotes: ""
"Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)"	user_agent The type of Web browser used by the client.
"JSESSIONID=OXDFAPVR4SXYZOIHSLVGA2Y"	cookies The name and value of a cookie that was sent to the client browser. If multiple cookies were sent, the list is delimited by the semicolon character.