本文共 26251 字，大约阅读时间需要 87 分钟。

http://www.cnblogs.com/sdytzz/archive/2011/01/20/1292892.html webalizer，在windows下运行，除了win32版的webalizer外，不需要其他任何支持。 win32版的webalizer下载地址在这里 下载后，解压缩在任意文件夹下即可 然后打开simple.conf,另存为webalizer.conf 打开webalizer.conf,修改。 Code 1 # 2 # Sample Webalizer configuration file 3 # Copyright 1997-2000 by Bradford L. Barrett (brad@mrunix.net) 4 # 5 # Distributed under the GNU General Public License. See the 6 # files "Copyright" and "COPYING" provided with the webalizer 7 # distribution for additional information. 8 # 9 # This is a sample configuration file for the Webalizer (ver 2.01) 10 # Lines starting with pound signs '#' are comment lines and are 11 # ignored. Blank lines are skipped as well. Other lines are considered 12 # as configuration lines, and have the form "ConfigOption Value" where 13 # ConfigOption is a valid configuration keyword, and Value is the value 14 # to assign that configuration option. Invalid keyword/values are 15 # ignored, with appropriate warnings being displayed. There must be 16 # at least one space or tab between the keyword and its value. 17 # 18 # As of version 0.98, The Webalizer will look for a 'default' configuration 19 # file named "webalizer.conf" in the current directory, and if not found 20 # there, will look for "/etc/webalizer.conf". 21 22 23 # LogFile defines the web server log file to use. If not specified 24 # here or on on the command line, input will default to STDIN. If 25 # the log filename ends in '.gz' (ie: a gzip compressed file), it will 26 # be decompressed on the fly as it is being read. 27 28 LogFile C:\WINDOWS\system32\LogFiles\W3SVC529919685\nc080917.log 29 30 # LogType defines the log type being processed. Normally, the Webalizer 31 # expects a CLF or Combined web server log as input. Using this option, 32 # you can process ftp logs as well (xferlog as produced by wu-ftp and 33 # others), or Squid native logs. Values can be 'clf', 'ftp' or 'squid', 34 # with 'clf' the default. 35 36 LogType iis 37 38 # OutputDir is where you want to put the output files. This should 39 # should be a full path name, however relative ones might work as well. 40 # If no output directory is specified, the current directory will be used. 41 42 OutputDir E:\wwwroot\banbank\webalizer 43 44 # HistoryName allows you to specify the name of the history file produced 45 # by the Webalizer. The history file keeps the data for up to 12 months 46 # worth of logs, used for generating the main HTML page (index.html). 47 # The default is a file named "webalizer.hist", stored in the specified 48 # output directory. If you specify just the filename (without a path), 49 # it will be kept in the specified output directory. Otherwise, the path 50 # is relative to the output directory, unless absolute (leading /). 51 52 #HistoryName webalizer.hist 53 54 # Incremental processing allows multiple partial log files to be used 55 # instead of one huge one. Useful for large sites that have to rotate 56 # their log files more than once a month. The Webalizer will save its 57 # internal state before exiting, and restore it the next time run, in 58 # order to continue processing where it left off. This mode also causes 59 # The Webalizer to scan for and ignore duplicate records (records already 60 # processed by a previous run). See the README file for additional 61 # information. The value may be 'yes' or 'no', with a default of 'no'. 62 # The file 'webalizer.current' is used to store the current state data, 63 # and is located in the output directory of the program (unless changed 64 # with the IncrementalName option below). Please read at least the section 65 # on Incremental processing in the README file before you enable this option. 66 67 Incremental yes 68 69 # IncrementalName allows you to specify the filename for saving the 70 # incremental data in. It is similar to the HistoryName option where the 71 # name is relative to the specified output directory, unless an absolute 72 # filename is specified. The default is a file named "webalizer.current" 73 # kept in the normal output directory. If you don't specify "Incremental" 74 # as 'yes' then this option has no meaning. 75 76 #IncrementalName webalizer.current 77 78 # ReportTitle is the text to display as the title. The hostname 79 # (unless blank) is appended to the end of this string (seperated with 80 # a space) to generate the final full title string. 81 # Default is (for english) "Usage Statistics for". 82 83 #ReportTitle Usage Statistics for 84 85 # HostName defines the hostname for the report. This is used in 86 # the title, and is prepended to the URL table items. This allows 87 # clicking on URL's in the report to go to the proper location in 88 # the event you are running the report on a 'virtual' web server, 89 # or for a server different than the one the report resides on. 90 # If not specified here, or on the command line, webalizer will 91 # try to get the hostname via a uname system call. If that fails, 92 # it will default to "localhost". 93 94 #HostName localhost 95 96 # HTMLExtension allows you to specify the filename extension to use 97 # for generated HTML pages. Normally, this defaults to "html", but 98 # can be changed for sites who need it (like for PHP embeded pages). 99 100 #HTMLExtension html 101 102 # PageType lets you tell the Webalizer what types of URL's you 103 # consider a 'page'. Most people consider html and cgi documents 104 # as pages, while not images and audio files. If no types are 105 # specified, defaults will be used ('htm*', 'cgi' and HTMLExtension 106 # if different for web logs, 'txt' for ftp logs). 107 108 PageType htm* 109 PageType cgi 110 #PageType phtml 111 #PageType php3 112 #PageType pl 113 114 # UseHTTPS should be used if the analysis is being run on a 115 # secure server, and links to urls should use 'https://' instead 116 # of the default 'http://'. If you need this, set it to 'yes'. 117 # Default is 'no'. This only changes the behaviour of the 'Top 118 # URL's' table. 119 120 #UseHTTPS no 121 122 # DNSCache specifies the DNS cache filename to use for reverse DNS lookups. 123 # This file must be specified if you wish to perform name lookups on any IP 124 # addresses found in the log file. If an absolute path is not given as 125 # part of the filename (ie: starts with a leading '/'), then the name is 126 # relative to the default output directory. See the DNS.README file for 127 # additional information. 128 # 129 # Note that this is not yet supported in the Windows port of Webalizer. 130 131 #DNSCache dns_cache.db 132 133 # DNSChildren allows you to specify how many "children" processes are 134 # run to perform DNS lookups to create or update the DNS cache file. 135 # If a number is specified, the DNS cache file will be created/updated 136 # each time the Webalizer is run, immediately prior to normal processing, 137 # by running the specified number of "children" processes to perform 138 # DNS lookups. If used, the DNS cache filename MUST be specified as 139 # well. The default value is zero (0), which disables DNS cache file 140 # creation/updates at run time. The number of children processes to 141 # run may be anywhere from 1 to 100, however a large number may effect 142 # normal system operations. Reasonable values should be between 5 and 143 # 20. See the DNS.README file for additional information. 144 145 #DNSChildren 0 146 147 # HTMLPre defines HTML code to insert at the very beginning of the 148 # file. Default is the DOCTYPE line shown below. Max line length 149 # is 80 characters, so use multiple HTMLPre lines if you need more. 150 151 #HTMLPre <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> 152 153 # HTMLHead defines HTML code to insert within the <HEAD></HEAD> 154 # block, immediately after the <TITLE> line. Maximum line length 155 # is 80 characters, so use multiple lines if needed. 156 157 #HTMLHead <META NAME="author" CONTENT="The Webalizer"> 158 159 # HTMLBody defined the HTML code to be inserted, starting with the 160 # <BODY> tag. If not specified, the default is shown below. If 161 # used, you MUST include your own <BODY> tag as the first line. 162 # Maximum line length is 80 char, use multiple lines if needed. 163 164 #HTMLBody <BODY BGCOLOR="#E8E8E8" TEXT="#000000" LINK="#0000FF" VLINK="#FF0000"> 165 166 # HTMLPost defines the HTML code to insert immediately before the 167 # first <HR> on the document, which is just after the title and 168 # "summary period"-"Generated on:" lines. If anything, this should 169 # be used to clean up in case an image was inserted with HTMLBody. 170 # As with HTMLHead, you can define as many of these as you want and 171 # they will be inserted in the output stream in order of apperance. 172 # Max string size is 80 characters. Use multiple lines if you need to. 173 174 #HTMLPost <BR CLEAR="all"> 175 176 # HTMLTail defines the HTML code to insert at the bottom of each 177 # HTML document, usually to include a link back to your home 178 # page or insert a small graphic. It is inserted as a table 179 # data element (ie: <TD> your code here </TD>) and is right 180 # alligned with the page. Max string size is 80 characters. 181 182 #HTMLTail <IMG SRC="msfree.png" ALT="100% Micro$oft free!"> 183 184 # HTMLEnd defines the HTML code to add at the very end of the 185 # generated files. It defaults to what is shown below. If 186 # used, you MUST specify the </BODY> and </HTML> closing tags 187 # as the last lines. Max string length is 80 characters. 188 189 #HTMLEnd </BODY></HTML> 190 191 # The Quiet option suppresses output messages Useful when run 192 # as a cron job to prevent bogus e-mails. Values can be either 193 # "yes" or "no". Default is "no". Note: this does not suppress 194 # warnings and errors (which are printed to stderr). 195 196 #Quiet no 197 198 # ReallyQuiet will supress all messages including errors and 199 # warnings. Values can be 'yes' or 'no' with 'no' being the 200 # default. If 'yes' is used here, it cannot be overriden from 201 # the command line, so use with caution. A value of 'no' has 202 # no effect. 203 204 #ReallyQuiet no 205 206 # TimeMe allows you to force the display of timing information 207 # at the end of processing. A value of 'yes' will force the 208 # timing information to be displayed. A value of 'no' has no 209 # effect. 210 211 #TimeMe no 212 213 # GMTTime allows reports to show GMT (UTC) time instead of local 214 # time. Default is to display the time the report was generated 215 # in the timezone of the local machine, such as EDT or PST. This 216 # keyword allows you to have times displayed in UTC instead. Use 217 # only if you really have a good reason, since it will probably 218 # screw up the reporting periods by however many hours your local 219 # time zone is off of GMT. 220 221 #GMTTime no 222 223 # Debug prints additional information for error messages. This 224 # will cause webalizer to dump bad records/fields instead of just 225 # telling you it found a bad one. As usual, the value can be 226 # either "yes" or "no". The default is "no". It shouldn't be 227 # needed unless you start getting a lot of Warning or Error 228 # messages and want to see why. (Note: warning and error messages 229 # are printed to stderr, not stdout like normal messages). 230 231 #Debug no 232 233 # FoldSeqErr forces the Webalizer to ignore sequence errors. 234 # This is useful for Netscape and other web servers that cache 235 # the writing of log records and do not guarentee that they 236 # will be in chronological order. The use of the FoldSeqErr 237 # option will cause out of sequence log records to be treated 238 # as if they had the same time stamp as the last valid record. 239 # Default is to ignore out of sequence log records. 240 241 #FoldSeqErr no 242 243 # VisitTimeout allows you to set the default timeout for a visit 244 # (sometimes called a 'session'). The default is 30 minutes, 245 # which should be fine for most sites. 246 # Visits are determined by looking at the time of the current 247 # request, and the time of the last request from the site. If 248 # the time difference is greater than the VisitTimeout value, it 249 # is considered a new visit, and visit totals are incremented. 250 # Value is the number of seconds to timeout (default=1800=30min) 251 252 #VisitTimeout 1800 253 254 # IgnoreHist shouldn't be used in a config file, but it is here 255 # just because it might be usefull in certain situations. If the 256 # history file is ignored, the main "index.html" file will only 257 # report on the current log files contents. Usefull only when you 258 # want to reproduce the reports from scratch. USE WITH CAUTION! 259 # Valid values are "yes" or "no". Default is "no". 260 261 #IgnoreHist no 262 263 # Country Graph allows the usage by country graph to be disabled. 264 # Values can be 'yes' or 'no', default is 'yes'. 265 266 #CountryGraph yes 267 268 # DailyGraph and DailyStats allows the daily statistics graph 269 # and statistics table to be disabled (not displayed). Values 270 # may be "yes" or "no". Default is "yes". 271 272 #DailyGraph yes 273 #DailyStats yes 274 275 # HourlyGraph and HourlyStats allows the hourly statistics graph 276 # and statistics table to be disabled (not displayed). Values 277 # may be "yes" or "no". Default is "yes". 278 279 #HourlyGraph yes 280 #HourlyStats yes 281 282 # GraphLegend allows the color coded legends to be turned on or off 283 # in the graphs. The default is for them to be displayed. This only 284 # toggles the color coded legends, the other legends are not changed. 285 # If you think they are hideous and ugly, say 'no' here :) 286 287 #GraphLegend yes 288 289 # GraphLines allows you to have index lines drawn behind the graphs. 290 # I personally am not crazy about them, but a lot of people requested 291 # them and they weren't a big deal to add. The number represents the 292 # number of lines you want displayed. Default is 2, you can disable 293 # the lines by using a value of zero ('0'). [max is 20] 294 # Note, due to rounding errors, some values don't work quite right. 295 # The lower the better, with 1,2,3,4,6 and 10 producing nice results. 296 297 #GraphLines 2 298 299 # The "Top" options below define the number of entries for each table. 300 # Defaults are Sites=30, URL's=30, Referrers=30 and Agents=15, and 301 # Countries=30. TopKSites and TopKURLs (by KByte tables) both default 302 # to 10, as do the top entry/exit tables (TopEntry/TopExit). The top 303 # search strings and usernames default to 20. Tables may be disabled 304 # by using zero (0) for the value. 305 306 #TopSites 30 307 #TopKSites 10 308 #TopURLs 30 309 #TopKURLs 10 310 #TopReferrers 30 311 #TopAgents 15 312 #TopCountries 30 313 #TopEntry 10 314 #TopExit 10 315 #TopSearch 20 316 #TopUsers 20 317 318 # The All* keywords allow the display of all URL's, Sites, Referrers 319 # User Agents, Search Strings and Usernames. If enabled, a seperate 320 # HTML page will be created, and a link will be added to the bottom 321 # of the appropriate "Top" table. There are a couple of conditions 322 # for this to occur.. First, there must be more items than will fit 323 # in the "Top" table (otherwise it would just be duplicating what is 324 # already displayed). Second, the listing will only show those items 325 # that are normally visable, which means it will not show any hidden 326 # items. Grouped entries will be listed first, followed by individual 327 # items. The value for these keywords can be either 'yes' or 'no', 328 # with the default being 'no'. Please be aware that these pages can 329 # be quite large in size, particularly the sites page, and seperate 330 # pages are generated for each month, which can consume quite a lot 331 # of disk space depending on the traffic to your site. 332 333 #AllSites no 334 AllURLs yes 335 #AllReferrers no 336 #AllAgents no 337 AllSearchStr yes 338 #AllUsers no 339 340 # The Webalizer normally strips the string 'index.' off the end of 341 # URL's in order to consolidate URL totals. For example, the URL 342 # /somedir/index.html is turned into /somedir/ which is really the 343 # same URL. This option allows you to specify additional strings 344 # to treat in the same way. You don't need to specify 'index.' as 345 # it is always scanned for by The Webalizer, this option is just to 346 # specify _additional_ strings if needed. If you don't need any, 347 # don't specify any as each string will be scanned for in EVERY 348 # log record A bunch of them will degrade performance. Also, 349 # the string is scanned for anywhere in the URL, so a string of 350 # 'home' would turn the URL /somedir/homepages/brad/home.html into 351 # just /somedir/ which is probably not what was intended. 352 353 #IndexAlias home.htm 354 #IndexAlias homepage.htm 355 356 # The Hide*, Group* and Ignore* and Include* keywords allow you to 357 # change the way Sites, URL's, Referrers, User Agents and Usernames 358 # are manipulated. The Ignore* keywords will cause The Webalizer to 359 # completely ignore records as if they didn't exist (and thus not 360 # counted in the main site totals). The Hide* keywords will prevent 361 # things from being displayed in the 'Top' tables, but will still be 362 # counted in the main totals. The Group* keywords allow grouping 363 # similar objects as if they were one. Grouped records are displayed 364 # in the 'Top' tables and can optionally be displayed in BOLD and/or 365 # shaded. Groups cannot be hidden, and are not counted in the main 366 # totals. The Group* options do not, by default, hide all the items 367 # that it matches. If you want to hide the records that match (so just 368 # the grouping record is displayed), follow with an identical Hide* 369 # keyword with the same value. (see example below) In addition, 370 # Group* keywords may have an optional label which will be displayed 371 # instead of the keywords value. The label should be seperated from 372 # the value by at least one 'white-space' character, such as a space 373 # or tab. 374 # 375 # The value can have either a leading or trailing '*' wildcard 376 # character. If no wildcard is found, a match can occur anywhere 377 # in the string. Given a string "www.yourmama.com", the values "your", 378 # "*mama.com" and "www.your*" will all match. 379 380 # Your own site should be hidden 381 #HideSite *mrunix.net 382 #HideSite localhost 383 384 # Your own site gives most referrals 385 #HideReferrer mrunix.net/ 386 387 # This one hides non-referrers ("-" Direct requests) 388 #HideReferrer Direct Request 389 390 # Usually you want to hide these 391 HideURL *.gif 392 HideURL *.GIF 393 HideURL *.jpg 394 HideURL *.JPG 395 HideURL *.png 396 HideURL *.PNG 397 HideURL *.ra 398 HideURL *.css 399 400 # Hiding agents is kind of futile 401 #HideAgent RealPlayer 402 403 # You can also hide based on authenticated username 404 #HideUser root 405 #HideUser admin 406 407 # Grouping options 408 #GroupURL /cgi-bin/* CGI Scripts 409 #GroupURL /images/* Images 410 411 #GroupSite *.aol.com 412 #GroupSite *.compuserve.com 413 414 #GroupReferrer yahoo.com/ Yahoo! 415 #GroupReferrer excite.com/ Excite 416 #GroupReferrer infoseek.com/ InfoSeek 417 #GroupReferrer webcrawler.com/ WebCrawler 418 419 #GroupUser root Admin users 420 #GroupUser admin Admin users 421 #GroupUser wheel Admin users 422 423 # The following is a great way to get an overall total 424 # for browsers, and not display all the detail records. 425 # (You should use MangleAgent to refine further) 426 427 #GroupAgent MSIE Micro$oft Internet Exploder 428 #HideAgent MSIE 429 #GroupAgent Mozilla Netscape 430 #HideAgent Mozilla 431 #GroupAgent Lynx* Lynx 432 #HideAgent Lynx* 433 434 # HideAllSites allows forcing individual sites to be hidden in the 435 # report. This is particularly useful when used in conjunction 436 # with the "GroupDomain" feature, but could be useful in other 437 # situations as well, such as when you only want to display grouped 438 # sites (with the GroupSite keywords). The value for this 439 # keyword can be either 'yes' or 'no', with 'no' the default, 440 # allowing individual sites to be displayed. 441 442 #HideAllSites no 443 444 # The GroupDomains keyword allows you to group individual hostnames 445 # into their respective domains. The value specifies the level of 446 # grouping to perform, and can be thought of as 'the number of dots' 447 # that will be displayed. For example, if a visiting host is named 448 # cust1.tnt.mia.uu.net, a domain grouping of 1 will result in just 449 # "uu.net" being displayed, while a 2 will result in "mia.uu.net". 450 # The default value of zero disable this feature. Domains will only 451 # be grouped if they do not match any existing "GroupSite" records, 452 # which allows overriding this feature with your own if desired. 453 454 #GroupDomains 0 455 456 # The GroupShading allows grouped rows to be shaded in the report. 457 # Useful if you have lots of groups and individual records that 458 # intermingle in the report, and you want to diferentiate the group 459 # records a little more. Value can be 'yes' or 'no', with 'yes' 460 # being the default. 461 462 #GroupShading yes 463 464 # GroupHighlight allows the group record to be displayed in BOLD. 465 # Can be either 'yes' or 'no' with the default 'yes'. 466 467 #GroupHighlight yes 468 469 # The Ignore* keywords allow you to completely ignore log records based 470 # on hostname, URL, user agent, referrer or username. I hessitated in 471 # adding these, since the Webalizer was designed to generate _accurate_ 472 # statistics about a web servers performance. By choosing to ignore 473 # records, the accuracy of reports become skewed, negating why I wrote 474 # this program in the first place. However, due to popular demand, here 475 # they are. Use the same as the Hide* keywords, where the value can have 476 # a leading or trailing wildcard '*'. Use at your own risk ;) 477 478 #IgnoreSite bad.site.net 479 #IgnoreURL /test* 480 #IgnoreReferrer file:/* 481 #IgnoreAgent RealPlayer 482 #IgnoreUser root 483 484 # The Include* keywords allow you to force the inclusion of log records 485 # based on hostname, URL, user agent, referrer or username. They take 486 # precidence over the Ignore* keywords. Note: Using Ignore/Include 487 # combinations to selectivly process parts of a web site is _extremely 488 # inefficent_!!! Avoid doing so if possible (ie: grep the records to a 489 # seperate file if you really want that kind of report). 490 491 # Example: Only show stats on Joe User's pages 492 #IgnoreURL * 493 #IncludeURL ~joeuser* 494 495 # Or based on an authenticated username 496 #IgnoreUser * 497 #IncludeUser someuser 498 499 # The MangleAgents allows you to specify how much, if any, The Webalizer 500 # should mangle user agent names. This allows several levels of detail 501 # to be produced when reporting user agent statistics. There are six 502 # levels that can be specified, which define different levels of detail 503 # supression. Level 5 shows only the browser name (MSIE or Mozilla) 504 # and the major version number. Level 4 adds the minor version number 505 # (single decimal place). Level 3 displays the minor version to two 506 # decimal places. Level 2 will add any sub-level designation (such 507 # as Mozilla/3.01Gold or MSIE 3.0b). Level 1 will attempt to also add 508 # the system type if it is specified. The default Level 0 displays the 509 # full user agent field without modification and produces the greatest 510 # amount of detail. User agent names that can't be mangled will be 511 # left unmodified. 512 513 #MangleAgents 0 514 515 # The SearchEngine keywords allow specification of search engines and 516 # their query strings on the URL. These are used to locate and report 517 # what search strings are used to find your site. The first word is 518 # a substring to match in the referrer field that identifies the search 519 # engine, and the second is the URL variable used by that search engine 520 # to define it's search terms. 521 522 SearchEngine yahoo.com p= 523 SearchEngine altavista.com q= 524 SearchEngine google.com q= 525 SearchEngine eureka.com q= 526 SearchEngine lycos.com query= 527 SearchEngine hotbot.com MT= 528 SearchEngine msn.com MT= 529 SearchEngine infoseek.com qt= 530 SearchEngine webcrawler searchText= 531 SearchEngine excite search= 532 SearchEngine netscape.com search= 533 SearchEngine mamma.com query= 534 SearchEngine alltheweb.com query= 535 SearchEngine northernlight.com qr= 536 SearchEngine baidu.com word= 537 SearchEngine sina.com.cn word= 538 SearchEngine sohu.com word= 539 SearchEngine 163.com q= 540 541 # The Dump* keywords allow the dumping of Sites, URL's, Referrers 542 # User Agents, Usernames and Search strings to seperate tab delimited 543 # text files, suitable for import into most database or spreadsheet 544 # programs. 545 546 # DumpPath specifies the path to dump the files. If not specified, 547 # it will default to the current output directory. Do not use a 548 # trailing slash ('/'). 549 550 #DumpPath /var/lib/httpd/logs 551 552 # The DumpHeader keyword specifies if a header record should be 553 # written to the file. A header record is the first record of the 554 # file, and contains the labels for each field written. Normally, 555 # files that are intended to be imported into a database system 556 # will not need a header record, while spreadsheets usually do. 557 # Value can be either 'yes' or 'no', with 'no' being the default. 558 559 #DumpHeader no 560 561 # DumpExtension allow you to specify the dump filename extension 562 # to use. The default is "tab", but some programs are pickey about 563 # the filenames they use, so you may change it here (for example, 564 # some people may prefer to use "csv"). 565 566 #DumpExtension tab 567 568 # These control the dumping of each individual table. The value 569 # can be either 'yes' or 'no'.. the default is 'no'. 570 571 #DumpSites no 572 DumpURLs yes 573 #DumpReferrers no 574 #DumpAgents no 575 #DumpUsers no 576 DumpSearchStr yes 577 578 # End of configuration file Have a nice day! 579 580 581 大家可以直接拷贝了我的用。 另外，需要将iis里的日志格式，设置为NC，这一步很重要，如果分析日志的时候出现truncating oversized username，那就是这里的问题了。呵呵 然后运行 webalizer.exe 分析就可以了。