142 CHAPTER 9: MONITORING W EB ACCESSalphanumeric and . (dot), - (hyphen) or _ (underscore) characters and canonly be up to 32 characters in length.Clicking FTP Now will immediately send the currently active Access Log tothe FTP server. This allows you to test your FTP settings or to save theAccess Log without waiting for the next automatic FTP.If no entries have been made in the logs when you click FTP Now, anempty log file will be saved on the FTP server.Viewing the AccessLogTo view the Access Log using the Web interface:1 Log in to the Web interface.2 Click Caching on the Toolbar.3 Select View Access Log in the Navigation Tree.The last 256 lines of the Access Log are displayed, with the most recentinformation shown at the bottom of the log.4 Click Refresh to update the displayed information.If the Webcache is deployed in Proxy mode, multiple entries for the pagesin the Web interface itself will be made in the Access Log. This is standardbehavior for the Webcache, as it is “seeing” the requests for the Webinterface pages and logging these requests in the Access Log. You shouldeither leave the Web Interface open for only short periods of time toreduce the entries made, or use a log analyzer tool such as Webtrends toview and analyze the Access Log.Analyzing theAccess LogThe access logs that have been saved on the FTP server are by defaultbased on the native Squid Log format. This is optimized for efficientgeneration and can be analyzed using a wide variety of off-the-shelf loganalysis tools.3Com recommends that you select the Webtrends Extended Log Format(WELF) option and use Webtrends Log Analyzer or WebTrends FirewallSuite to analyze the access logs that the Webcache produces:http://www.webtrends.com(correct at time of publication)dua1611-5aaa04.book Page 142 Friday, November 29, 2002 8:56 PM
