Site analysis log

Site analysis log

IBM WebSphere Portal site analysis log information is collected in...
WP_PROFILE/logs/app_server_name/sa_date_time.log

The current (active) log file is named sa.log. The dateFormat parameter determines the interval at which the file is created.
The site analysis log uses the NCSA Combined log format, which is a combination of NCSA Common log format and three additional fields:

referrer
user_agent
cookie

The following example displays a sample entry in the site analysis log. The table describes each field of the log format:
9.37.3.88 - customer2 [10/Apr/2002:21:33:16 +0000] "GET /Portlet/146/Welcome_Portlet?PortletPID=146&PortletMode=View&PortletState=Normal HTTP/1.1" 200 -1 "http://myserver.company.com/Page/110/Welcome" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)" "JSESSIONID=OXDFAPVR4SXYZOIHSLVGA2Y"

Field Log Field Name Explanation
9.37.3.88 host IP address of the HTTP client that sent the request. If there is a reverse proxy server between the client and the portal, the IP address logged is that of the reverse proxy server. To log the IP address of the HTTP client, remove the reverse proxy server from the environment.
- rcf931 Client making request. Always set to hyphen (-).
customer2 username User ID for the client. If not known, the field is set to the hyphen character (-).
[10/APR/2002:21:33:16 +0000] date:time: timezone Date and time of the HTTP request.
"GET /Portlet/146/Welcome_Portlet?PortletMode=View&PortletState=Normal HTTP/1.1" request HTTP method, the URL of the requested resource and the version of HTTP used by the client.
200 statuscode HTTP status code for the request.
-1 bytes Number of bytes of data transferred from the client as part of the request. A value of -1 means unknown.
"http://myserver.company.com/Page/110/Welcome" referrer URL that linked the client to the website. For some requests, the referrer might not be logged. In such cases, the field is set to empty double quotes: ""
"Firefox/2.0 (compatible; MSIE 5.5; Windows NT 4.0)" user_agent Type of Web browser used by the client.
"JSESSIONID=OXDFAPVR4SXYZOIHSLVGA2Y" cookies Name and value of a cookie sent to the client browser. If multiple cookies were sent, the list is delimited by the semicolon character.

Parent Log and analyze server side site data

Field	Log Field Name	Explanation
9.37.3.88	host	IP address of the HTTP client that sent the request. If there is a reverse proxy server between the client and the portal, the IP address logged is that of the reverse proxy server. To log the IP address of the HTTP client, remove the reverse proxy server from the environment.
-	rcf931	Client making request. Always set to hyphen (-).
customer2	username	User ID for the client. If not known, the field is set to the hyphen character (-).
[10/APR/2002:21:33:16 +0000]	date:time: timezone	Date and time of the HTTP request.
"GET /Portlet/146/Welcome_Portlet?PortletMode=View&PortletState=Normal HTTP/1.1"	request	HTTP method, the URL of the requested resource and the version of HTTP used by the client.
200	statuscode	HTTP status code for the request.
-1	bytes	Number of bytes of data transferred from the client as part of the request. A value of -1 means unknown.
"http://myserver.company.com/Page/110/Welcome"	referrer	URL that linked the client to the website. For some requests, the referrer might not be logged. In such cases, the field is set to empty double quotes: ""
"Firefox/2.0 (compatible; MSIE 5.5; Windows NT 4.0)"	user_agent	Type of Web browser used by the client.
"JSESSIONID=OXDFAPVR4SXYZOIHSLVGA2Y"	cookies	Name and value of a cookie sent to the client browser. If multiple cookies were sent, the list is delimited by the semicolon character.