Awstat配置手册
AWStats分析Tomcat\Apache\IIS\nginx 的访问日志Apache+AWStats安装使用[原创]
AWStats安装使用
1、事先安装好Apache
2、安装awstats的命令(将awstats安装在/data/soft/awstats目录)
mkdir -p /var/lib/awstats
cd /data/soft
wget http://jaist.dl.sourceforge.net/project/awstats/AWStats/7.0/awstats-7.0.tar.gz
tar zxvf awstats-7.0.tar.gz
mv awstats-7.0 awstats
cd awstats/tools/
perl awstats_configure.pl
3、Perl脚本awstats_configure.pl安装过程(以下内容引用AWStats英文使用说明)
(1)
-----> Running OS detected: Linux, BSD or Unix
Warning: AWStats standard directory on Linux OS is '/usr/local/awstats'.
If you want to use standard directory, you should first move all content
of AWStats distribution from current directory:
/data/soft/awstats
to standard directory:
/usr/local/awstats
And then, run configure.pl from this location.
Do you want to continue setup from this NON standard directory ? y
这时选择y回车。
(2)
-----> Check for web server install
Enter full config file path of your Web server.
Example: /etc/httpd/httpd.conf
Example: /usr/local/apache2/conf/httpd.conf
Example: c:\Program files\apache group\apache\conf\httpd.conf
Config file path ('none' to skip web server setup):
> /etc/httpd/conf/httpd.conf
第一次使用请输入Apache的httpd.conf路径，例如/etc/httpd/conf/httpd.conf
以后如果再使用perl awstats_configure.pl生成配置文件，则可以输入none跳过。
(3)
-----> Check and complete web server config file '/etc/httpd/conf/httpd.conf'
Add 'Alias /awstatsclasses "/data/soft/awstats/wwwroot/classes/"'
Add 'Alias /awstatscss "/data/soft/awstats/wwwroot/css/"'
Add 'Alias /awstatsicons "/data/soft/awstats/wwwroot/icon/"'
Add 'ScriptAlias /awstats/ "/data/soft/awstats/wwwroot/cgi-bin/"'
Add '' directive
AWStats directives added to Apache config file.
-----> Update model config file '/data/soft/awstats/wwwroot/cgi-bin/awstats.model.conf'
File awstats.model.conf updated.
-----> Need to create a new config file ?
Do you want me to build a new AWStats config/profile
file (required if first install) ? y
创建一个新的配置文件，选择y
(4)
-----> Define config file name to create
What is the name of your web site or profile analysis ?
Example: www.mysite.com
Example: demo
Your web site, virtual server or profile name:
>xqhan
输入站点名称，例如xqhan
(5)
-----> Define config file path
In which directory do you plan to store your config file(s) ?
Default: /etc/awstats
Directory path to store config file(s) (Enter for default):
>
-----> Create config file '/etc/awstats/awstats.xqhan.conf'
Config file /etc/awstats/awstats.xqhan.conf created.
-----> Restart Web server with '/sbin/service httpd restart'
httpd: Could not reliably determine the server's fully qualified domain name, using 172.16.34.237 for ServerName
停止 httpd：[确定]
启动 httpd：[确定]
输入AWStats配置文件存放路径，一般直接回车则使用默认路径/etc/awstats
(6)
-----> Add update process inside a scheduler
Sorry, configure.pl does not support automatic add to cron yet.
You can do it manually by adding the following command to your cron:
/data/soft/awstats/wwwroot/cgi-bin/awstats.pl -update -config=xqhan
Or if you have several config files and prefer having only one command:
/data/soft/awstats/tools/awstats_updateall.pl now
Press ENTER to continue...
按回车键继续
(7)
A SIMPLE config file has been created: /etc/awstats/awstats.xqhan.conf
You should have a look inside to check and change manually main parameters.
You can then manually update your statistics for 'xqhan' with command:
> perl awstats.pl -update -config=xqhan
You can also read your statistics for 'xqhan' with URL:
> http://localhost/awstats/awstats.pl?config=xqhan
Press ENTER to finish...
按回车键结束
4、修改awstats.xqhan.conf配置
vi /etc/awstats/awstats.xqhan.conf
按?，在之后输入要搜索的内容LogFile="
然后按Ins键，找到LogFile="/var/log/httpd/access_log"
改为要分析的Apache日志路径与文件名。
(1)多日志合并分析(例：其中一台服务器11月24日-11月26日的日志ex121124.log-ex121126.log)
LogFile="/data/soft/awstats/tools/logresolvemerge.pl /var/log/httpd/iis/ex121124.log /var/log/httpd/iis/ex121125.log /var/log/httpd/iis/ex121126.log|"
或
LogFile="/data/soft/awstats/tools/logresolvemerge.pl /var/log/httpd/iis/ex12112*.log|"
(2)分析使用gzip压缩过的日志文件
LogFile="gzip -d s %b \"%{Referer}i\" \"%{User-Agent}i\" %T " combined
CustomLog log/access_log combined
日志格式说明：
%h 请求使用的IP地址
%l 远端登录名(由identd而来，如果支持的话)，除非IdentityCheck设为"On"，否则将得到一个"-"。
%u 远程用户名(根据验证信息而来；如果返回status(%s)为401，可能是假的)
%t 时间，用普通日志时间格式(标准英语格式)
%r 请求的第一行
%s 状态。对于内部重定向的请求，这个状态指的是原始请求的状态，---%>s则指的是最后请求的状态。
%b 以CLF格式显示的除HTTP头以外传送的字节数，也就是当没有字节传送时显示'-'而不是0。
\"%{Referer}i\" 发送到服务器的请求头Referer的内容。
\"%{User-Agent}i\" 发送到服务器的请求头User-Agent的内容。
%T 处理完请求所花时间，以秒为单位。
%I 接收的字节数，包括请求头的数据，并且不能为零。要使用这个指令你必须启用mod_logio模块。
%O 发送的字节数，包括请求头的数据，并且不能为零。要使用这个指令你必须启用mod_logio模块。
iis
GET /seek/images/ip.gif - 200 Mozilla/5.0+(X11;+U;+Linux+2.4.2-2+i686;+en-US;+0.7)
连接时间 2007-09-21 01:10:51
IP地址 10.152.8.17 - 10.152.8.2
端口 80
请求动作 GET /seek/images/ip.gif - 200
返回结果 - 200 （用数字表示，如页面不存在则以404返回）
浏览器类型 Mozilla/5.0+
系统等相关信息 X11;+U;+Linux+2.4.2-2+i686;+en-US;+0.7
日志实例
# tail -n 1 iis/ex121124.log
2012-11-24 15:59:58 W3SVC1244844107 10.0.2.71 GET /js/jquery-1.4.1.js - 80 - 14.145.137.144 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) 200 0 0
# tail -n 1 nginx/access.2012-11-24
42.51.134.75 - - "POST /user/login/doLogin HTTP/1.1"200 5137 Referer:"http://www.xqhan.com/user/login?ADTAG=guangzhou_vivid_login"UA:"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" "-"
# tail -n 1 apache/api-access_log
113.108.89.16 - - "GET /caibei HTTP/1.0" 200 20374539 "http://cb.qq.com/shop/tuan/spider" "-"
============================================
172.16.34.80 - - "GET / HTTP/1.1" 304 0 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" "-"
172.16.34.80 - - "GET / HTTP/1.1" 304 0 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" "-"
172.16.34.80 - - "GET / HTTP/1.1" 304 0 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" "-"
172.16.34.80 - - "GET / HTTP/1.1" 304 0 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" "-"
# cat access2.log
172.16.34.80 - - "GET / HTTP/1.1" 304 158 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" "-" "-"
172.16.34.80 - - "GET / HTTP/1.1" 304 158 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" "-" "-"
172.16.34.80 - - "GET / HTTP/1.1" 304 158 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)" "-" "-"
172.16.34.80 - - "GET / HTTP/1.1" 304 158 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR
angzhou_vivid_login""Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" "-"
42.51.134.69 - - "POST /user/login/doLogin HTTP/1.1"200 5139 "http://www.xqhan.com/user/login?ADTAG=guangzhou_vivid_login""Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" "-"
42.51.134.84 - - "POST /user/login/doLogin HTTP/1.1"200 5138 "http://www.xqhan.com/user/login?ADTAG=guangzhou_vivid_login""Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)" "-"
42.51.1
页:
[1]