Q&A


Q. Can Witness analyze large volume of access log?

A. Yes, theoretically there is no limitation about size of access log, but it depends on your computer's configuration.

Here is configuration and response time to analyze 100,000 log records.

PC: Pentium4 2.4GHz, RAM 384MB, WindowsXP
Number of records: 100,000
Size of access log: 21MB
Loading: 30sec.
Analyzing: approximately 10 sec. each analysis

The important factor to analyze large volume of access log is physical memory size.
If you don't have enough memory, swapping will be happened so may times and response time will be very slow.

At least 256MB of RAM will be required for 100,000 records.
At least 512MB of RAM will be required for 200,000 records.


Q.Loading access log stopped in the middle.

A.Causes

1.Trial period ( 2 weeks )
If you are in trial period, Witness always load only first 100 records of access log.

2. Select "No Limitation" in Load condition screen
You can define the limitation of loading at "Max. number of requests to be loaded" field in [Configuration]-[Load condition]. If you put 100 in here, Witness stops loading when record count becomes 100.

 

Q.Host name analysis takes long time

A.Conversion from IP address to host name uses DNS

If the access log file needs to be analyzed has IP address instead of host name, Witness converts IP address to host name by DNS when user select host name analysis. As converting IP address uses DNS on the internet/intranet, so that this process sometimes very slow.


Q.Host name doesn't appear

A.Refer host sends IP address instead of host name

If the case refer host sends IP address instead of host name, host name is not recorded in access log file. In that case, Witness tries to solve the host name from IP address, if your computer connects to the internet, otherwise IP address is displayed instead of host name in the result screen.



Q.Values in NCSA Common log are displayed in wrong column name

A.Witness uses NCSA default log directive to purse NCSA Common log, if you don't customize the directive.

Please customize log directive at [Configuration]-[Log directive] in the menu bar.


Q.Year, Month and Day displayed in wrong position

A.Please customize the order of Year, Month and Day at [Configuration]-[Log directive] in the menu bar.