lauri/logide-parsimine
1
0
Fork 0
Code Issues Pull Requests Activity

Apache2 parsimise täiendavaid näidiseid

Browse Source
This commit is contained in:
Lauri Võsandi 2018-06-12 21:21:29 +03:00
parent 0ff2555e31
commit fff3257207
1 changed files with 48 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
apache2.md
View File

@ -1,4 +1,26 @@
#Apache2 logide parsimine # Apache2 logide parsimine
## Apache2 logide formaat
Apache2 logid on formaadis:
```
IP-address - username [day/month/year:hour:minute:second +timzone] "VERB /path/to/page HTTP/1.1" status size "referrer" "user-agent"
```
Näidised:
```
87.250.224.52 - - [11/Jun/2018:18:40:16 +0300] "GET /~lvosandi/ HTTP/1.1" 200 640 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
54.36.148.150 - - [04/Apr/2018:09:13:30 +0300] "GET /~lvosandi/pics/lauri.jpeg HTTP/1.1" 404 465 "-" "Mozilla/5.0 (compatible; AhrefsBot/5.2; +http://ahrefs.com/robot/)"
66.249.66.213 - - [13/Mar/2018:18:18:06 +0200] "GET /~lvosandi/check.html HTTP/1.1" 200 831 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
```
Viimane GET päring aadressile http://enos.itcollege.ee/~lvosandi/check.html tehti aadressilt 66.249.66.213
kasutades Nexus 5X telefoni veebilehitsjeat 13. märtsil 18:18:06.
HTTP vastuse suurus oli 831 baiti ning kood oli 200 OK.
## Logide näidised
Laadi alla mõned näidised ja paki need lahti: Laadi alla mõned näidised ja paki need lahti:
@ -8,6 +30,8 @@ ionice nice tar xvf apache2.tar # Lahti pakkimine madala CPU ja IO prioriteediga
cd apache2 cd apache2
``` ```
## Bashi käskude näidised
Leiame esimesed kümme GET päringut apache logifailist: Leiame esimesed kümme GET päringut apache logifailist:
```bash ```bash
@ -79,7 +103,7 @@ Enim külastatud URL veebiserveris:
```bash ```bash
cat access.log \ cat access.log \
| awk -F \" '{ print $2}' \ | awk -F '"' '{ print $2}' \
| cut -d ' ' -f 2- \ | cut -d ' ' -f 2- \
| sort \ | sort \
| uniq -c \ | uniq -c \
@ -91,16 +115,34 @@ Kõige enam sisu postitanud veebilehitsejad:
```bash ```bash
cat access.log \ cat access.log \
| awk -F \" '{ if ($2 ~ "^POST ") print $6}' \ | awk -F '"' '{ if ($2 ~ "^POST ") print $6}' \
| sort \ | sort \
| uniq -c \ | uniq -c \
| sort -n -r \ | sort -n -r \
| head | head
``` ```
Veateate 5xx põhjustanud päringute leidmine: Veateate 4xx põhjustanud päringute leidmine:
```bash ```bash
(cat access.log; zcat access.log*.gz) \ (cat access.log; zcat access.log*.gz) \
| awk -F \" '{ if ($3 ~ "^ 5[0-9][0-9] ") print $0}' | awk -F \" '{ if ($3 ~ "^ 4[0-9][0-9] ") print $0}'
``` ```
Kokkupakitud logifailide originaalsuuruse tuvastamine pv ning wc abil:
```bash
zcat *.gz | pv > /dev/null
zcat *.gz | wc -c
```
Numbrite vormindamine:
```bash
SUURUS=$(zcat *.gz | wc -c)
echo $SUURUS | numfmt --to=iec
echo $SUURUS / 1024 / 1024 | bc
expr $SUURUS / 1024 / 1024
echo "Logifailide originaalsuurus: $(echo $SUURUS | numfmt --to=iec-i)B"
echo "Logifailide originaalsuurus: $(expr $SUURUS / 1048576) MiB"
```