Apache,Nginx,Tengine,IIS
支持的日志格式
Apache:
1,%h %l %u %t \"%r\" %>s %b
2,%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"
3,%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" \"%{X-Forwarded-For}i\"
4,%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D
5,%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" \"%{X-Forwarded-For}i\" %D
%h 可以换成%{X-Real-IP}i
Nginx,Tengine:
date time cs-method cs-uri-stem 4,%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D
5,%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" \"%{X-Forwarded-For}i\" %D
%h 可以换成%{X-Real-IP}i
Nginx,Tengine:
1,$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent;
2,$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent";
3,$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$http_x_forwarded_for";
4,$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" $request_time;
5,$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$http_x_forwarded_for" $request_time;
IIS:
默认的勾选字段就可以分析,但是为了能获得更多有用信息,请勾选以下字段:
4,$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" $request_time;
5,$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$http_x_forwarded_for" $request_time;
IIS:
默认的勾选字段就可以分析,但是为了能获得更多有用信息,请勾选以下字段:
cs-uri-query s-port c-ip cs(User-Agent)
sc-status time-taken sc-bytes cs(referer)
日志文件建议按天分割,以提高效率。
下一篇教程: 建立分组,导入日志