raw access log question

Posted: Wed Mar 21, 2007 2:22 am

is there anyway that i can only view one day or a weeks worth of the access log? i downloaded the log, try to open it and it takes forever to load and usually ends up freezing my computer. my computers not even that old lol.

reason i'm asking is because i have spam bots posting on my forum even though i have the gfx_check set for new users. from what i understand, a real person signs up someone else, who will then hit my site with the spam bot. so to find out who is signing them up, i need to view my access log.

Posted: Wed Mar 21, 2007 3:57 am

You don´t need to download the complete log folder. Just douple click and open the log folder you´ll see within this folder usally all access_logs/ftp_logs with date.
So you can easily choose one of them and download the file.
To find out whats going on its really a good idea to check the logs beneed this you can also use nukesentinel for this.

Posted: Wed Mar 21, 2007 2:52 pm

If you're talking about Apache's access_logs .. it depends on how your host has it set up. Mine are set up in one daily file - access_log
And then it is processed and appeneded to one big access_log.processed

Plesk has an option to view a X number of lines in the file. But it doesn't have date tracking.

Here's what I do:
If you have ssh access to your system, you can go to the access_log directory and use grep

Code:




grep "17/Mar/2007" access_log

Should return every line from that date. Or grep by IP address, URL, etc. It all depends on how much data your access_log returns