Reporting on elements in the request line

Terry Chambers <[email protected]> Tue, 10 Nov 2009 09:46:01 -0500
Newsgroups gmane.comp.web.analog.general
Message-ID <[email protected]>
--===============1477259108==
Content-Type: multipart/alternative; boundary=001485f20b5a73207c0478055e29

--001485f20b5a73207c0478055e29
Content-Type: text/plain; charset=ISO-8859-1

Hi

I've got log files from a Google Search appliance.  The data is located in
the "request" value.

192.0.0.0 - - [05/Nov/2009:14:50:49 -0500] "GET
/search?coutput=json&q=red+hat&btnG=Google+Search&access=p&client=default_frontend&sort=date%3AD%3AL%3Ad1&entqr=3&oe=UTF-8&ie=UTF-8&ud=1&site=default_collection&ip=192.0.0.0&num=100&filter=0&output=xml
HTTP/1.1" 200 77014 438 0.12

I'd like to be able to report off of the values such as "&client" and
"&site" and "&q".

Is there anyway to do that?

For example, I'd love to be able to have a report that would show how many
requests had "&site=default_collection" and then see the breakdown for any
other values for &site=.

Thanks
Terry

--001485f20b5a73207c0478055e29
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi<div><br></div><div>I&#39;ve got log files from a Google Search appliance=
. =A0The data is located in the &quot;request&quot; value.</div><div><br></=
div><div><span style=3D"font-family:arial, sans-serif;font-size:13px;color:=
rgb(34, 34, 34)">192.0.0.0 - - [05/Nov/2009:14:50:49 -0500] &quot;GET /sear=
ch?coutput=3Djson&amp;q=3Dred+hat&amp;btnG=3DGoogle+Search&amp;access=3Dp&a=
mp;client=3Ddefault_frontend&amp;sort=3Ddate%3AD%3AL%3Ad1&amp;entqr=3D3&amp=
;oe=3DUTF-8&amp;ie=3DUTF-8&amp;ud=3D1&amp;site=3Ddefault_collection&amp;ip=
=3D192.0.0.0&amp;num=3D100&amp;filter=3D0&amp;output=3Dxml HTTP/1.1&quot; 2=
00 77014 438 0.12</span></div>

<div><br></div><div>I&#39;d like to be able to report off of the values suc=
h as &quot;&amp;client&quot; and &quot;&amp;site&quot; and &quot;&amp;q&quo=
t;.</div><div><br></div><div>Is there anyway to do that?</div><div><br>
</div><div>For example, I&#39;d love to be able to have a report that would=
 show how many requests had &quot;&amp;site=3Ddefault_collection&quot; and =
then see the breakdown for any other values for &amp;site=3D.</div><div><br=
>
</div><div>Thanks</div><div>Terry</div>

--001485f20b5a73207c0478055e29--

--===============1477259108==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

--===============1477259108==--