i_chain = { # The name of the log format log.format.format_label = "Novell iChain Extended (W3C) Web Server Log Format" log.miscellaneous.log_data_type = "generic_w3c" log.miscellaneous.log_format_type = "other" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^#Software: iChain" # The format of dates and times in this log log.format.date_format = "yyyy-mm-dd" log.format.time_format = "hh:mm:ss" # Don't track these fields as discrete database fields auto_setup.omit_database_fields = "sc_bytes,cs_bytes,time_taken" # Log Filters log.filters = { 1 = { label = "1" comment = "" value = "if (matches_regular_expression(src_port, '^[0-9.]+/([0-9]+)$')) then src = $1;" requires_fields = { src_port = true src = true } } # 1 2 = { label = "2" comment = "" value = "if (matches_regular_expression(src, '^([0-9.]+)/[0-9]+$')) then src = $1;" requires_fields = { src = true } } # 2 # Extract the IP and port from src 3 = { label = "3" comment = "" value = "if (matches_regular_expression(dst_port, '^[0-9.]+/([0-9]+)$')) then dst = $1;" requires_fields = { dst_port = true dst = true } } # 3 4 = { label = "4" comment = "" value = "if (matches_regular_expression(dst, '^([0-9.]+)/[0-9]+$')) then dst = $1;" requires_fields = { dst = true } } # 4 # Extract the IP and port from svsrc 5 = { label = "5" comment = "" value = "if (matches_regular_expression(svsrc_port, '^[0-9.]+/([0-9]+)$')) then svsrc = $1;" requires_fields = { svsrc_port = true svsrc = true } } # 5 6 = { label = "6" comment = "" value = "if (matches_regular_expression(svsrc, '^([0-9.]+)/[0-9]+$')) then svsrc = $1;" requires_fields = { svsrc = true } } # 6 remove_query = { label = "$lang_admin.log_filters.remove_query_label" comment = "$lang_admin.log_filters.remove_query_comment" value = "if (contains(page, '?')) then page = substr(page, 0, index(page, '?') + 1) . '(parameters)';" } # remove_query detect_page_views = { label = '$lang_admin.log_filters.detect_page_views_label' comment = '$lang_admin.log_filters.detect_page_views_comment' value = "if ((file_type eq 'JPEG') or (file_type eq 'JPG') or (file_type eq 'GIF') or (file_type eq 'ICO') or (file_type eq 'PNG') or (file_type eq 'CSS') or (file_type eq 'SWF') or (file_type eq 'JS')) then page_views = 0; else page_views = 1;" } # detect_page_views strip_non_page_views = { label = '$lang_admin.log_filters.strip_non_page_views_label' comment = '$lang_admin.log_filters.strip_non_page_views_comment' value = "if (page_views == 0) then page = substr(page, 0, last_index(page, '/') + 1) . '(nonpage)';" } # strip_non_page_views mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'hits = 1;' } # mark_entry } # log.filters log.field_options = { sessions_page_field = "page" sessions_visitor_id_field = "src" sessions_event_field = "page_views" } # log.field_options database.numerical_fields = { hits = { label = "$lang_stats.field_labels.hits" default = false requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # hits page_views = { label = "$lang_stats.field_labels.page_views" default = true requires_log_field = false type = "int" display_format_type = "integer" } # page_views visitors = { label = "$lang_stats.field_labels.visitors" default = false requires_log_field = true log_field = "src" type = "unique" display_format_type = "integer" } # visitors } # database.numerical_fields create_profile_wizard_options = { # How the reports should be grouped in the report menu report_groups = { date_time_group = "" } # report_groups } # create_profile_wizard_options not_supported = { } # not_supported } # i_chain