Analyze Access Log

Steps to analyze access log

  1. Open access log
    Select [File]-[Open] on the menu bar. Then menu bar asks the location of access log.
    Location Description
    Local Local file chooser shows file list in local drive.
    Select access log file from the list. Then Witness will start loading.
    If you want to load multiple access logs, then select access logs by control key + click.
    Network

    Using this function, following conditions are required.
    1. Computer has to be connected to the internet.
    2. Ftp server has to be running at target computer.

    3. Ftp connection has to be available between your computer and target computer.

    Network filechooser shows server list in upper panel and server information in lower panel.
    After enter the server information to lower panel or select specific server at server list, you can click [Connect] button.
    Network file chooser shows file list of the server you selected/entered.
    You can load access log by clicking [Open] button at bottom of window. Then Witness will start loading.
    If you want to load multiple access logs, then select access logs by control key + click.

    Address Book Address book shows address list.
    Select access log file from the list. Then Witness will start loading.
    If you want to load multiple access logs, then select access logs by control key + click.

  2. Execute startup analysis
    As soon as access log is loaded properly, witness invoke startup analysis that is defined [Configuration]-[Startup Analysis] on the menu bar.
    The analysis defined as startup will show the result of analysis on the window.
    Once analysis is donw properly, access log will be memorized at [File]-[History] on the menu bar. You can reload access log by just clicking there.
  3. Analyze
    [Analyze] on the menu bar shows all available analysis. You can execute analysis any time.
    If you select specific rows in result window and execute some analysis, it will be zoom in analysis. You will have another window for zoom in to see the result.