Q. Can Witness analyze
large volume of access log?
A. Yes, theoretically there is no limitation
about size of access log, but it depends on your computer's
Here is configuration
and response time to analyze 100,000 log records.
PC: Pentium4 2.4GHz, RAM 384MB,
Number of records: 100,000
Size of access log: 21MB
Analyzing: approximately 10 sec. each analysis
The important factor to analyze large volume of access
log is physical memory size.
If you don't have enough memory, swapping will be happened
so may times and response time will be very slow.
At least 256MB of RAM will be required for 100,000 records.
At least 512MB of RAM will be required for 200,000 records.
Q.Loading access log stopped
in the middle.
( 2 weeks )
If you are in trial period,
Witness always load only first 100 records of access log.
2. Select "No
Limitation" in Load condition screen
You can define the limitation of
loading at "Max. number of requests to be loaded"
field in [Configuration]-[Load condition]. If you put
100 in here, Witness stops loading when record count becomes
Q.Host name analysis takes
A.Conversion from IP address to host
name uses DNS
If the access log file
needs to be analyzed has IP address instead of host name,
Witness converts IP address to host name by DNS when user
select host name analysis. As converting IP address uses
DNS on the internet/intranet, so that this process sometimes
Q.Host name doesn't appear
A.Refer host sends IP address instead
of host name
If the case refer host
sends IP address instead of host name, host name is not
recorded in access log file. In that case, Witness tries
to solve the host name from IP address, if your computer
connects to the internet, otherwise IP address is displayed
instead of host name in the result screen.
Q.Values in NCSA Common log
are displayed in wrong column name
A.Witness uses NCSA default log directive
to purse NCSA Common log, if you don't customize the directive.
Please customize log directive
at [Configuration]-[Log directive] in the menu
Q.Year, Month and Day displayed
in wrong position
A.Please customize the order of Year,
Month and Day at [Configuration]-[Log directive] in the