ArsDigita Reporte is not in any way innovative as far as log analysis goes. We provide no more and no less capability than analog (which is one of the best tools and is free and you have the source code so you can change it, which is what we did to cope with some weirdness in how analog treats some of our .tcl page loads). What ArsDigita Reporte saves you from having to do is write a bunch of Unix cron jobs and set up servers to deliver the reports to your clients.
ArsDigita Reporte simultaneously accomplishes Year 2000-compliance and scalability by keeping each year's reports in a separate directory named "1998" or "1999" or whatever. This keeps any particular Unix directory from filling up with thousands of files and making poor old Unix dig around too much for the file you need.
ArsDigita Reporte should work with any Web server program (i.e., you can be using Apache or Netscape Enterprise or whatever as your user-visible Web server). To run the reporting server, you will need to
This is free software, copyright ArsDigita and distributed under the GNU General Public License.
add the lines
set todays_month [format %02d $todays_month]
set month [format %02d $month]
before
set report_date "${two_digit_year}${month}$monthday"
add the line
set month [format %02d $month]
before
set report_date "${two_digit_year}${month}$monthday"
under the procs six_digit_time_string_from_ns_time and eight_digit_time_string_from_ns_time, change these lines from:
set month [expr 1 + [parsetime_from_seconds mon $time]]
to:
set month [format %02d [expr 1 + [parsetime_from_seconds mon $time]]]
In the proc month_length_in_days, add the line
set numeric_month [string trimleft $numeric_month 0]
before the line
switch $numeric_month {
change this lines from:
set one_month_ago_time [expr $todays_time - ([month_length_in_days [expr [string range [six_digit_time_string_from_ns_time $todays_time] 2 3] - 1]] * $one_day_in_seconds)] to these:
set last_month_numeric [expr ([string range [six_digit_time_string_from_ns_time $todays_time] 2 3] - 1)]
if {$last_month_numeric==0} {set last_month_numeric 12}
set one_month_ago_time [expr $todays_time - ([month_length_in_days $last_month_numeric ] * $one_day_in_seconds)]
There aren't any known problems with ArsDigita Reporte per se. However, analog itself has been known to dump core. Sometimes just pulling the command line from the AOLserver error log (where it is written regardless of whether analysis produces any errors) and rerunning it from a shell will get you out of your difficulty. Anyway, Reporte will send you email if it has any problem overnight. And Reporte will try again during the day if your machine was down during the night. So it should be reasonably robust.
My (philg's) main complaint with the whole system is that reverse DNS lookup makes log analysis crawl. Analyzing 24 hours of photo.net logs (500,000 hits) takes between 3 and 5 hours! This is being done in the early morning hours on a 4-CPU HP RISC box with 4 GB of RAM so presumably all the bottleneck is reverse DNS.