1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
|
# $Id: sample.def.conf,v 1.1 2003/12/18 00:54:03 stkn Exp $
[global]
# Compress XML state files with max gzip compression
compress_mode=9
## let modlogan decide what a read-ahead-limit might be the best
read_ahead_limit = 0
########## WEB Processor Section
[processor_web]
include = /etc/modlogan/modlogan/group.ua.conf,groupua
include = /etc/modlogan/modlogan/group.os.conf,groupos
# Host grouping has been split into some groups to allow
# for detailed reports if you have lot's of visitors from germany etc.
include = /etc/modlogan/modlogan/group.host.conf,grouphosts_germany
include = /etc/modlogan/modlogan/group.host.conf,grouphosts_austria
include = /etc/modlogan/modlogan/group.host.conf,grouphosts_us
include = /etc/modlogan/modlogan/group.host.conf,grouphosts_misc
# these two groupings should reasonably group most hosts
include = /etc/modlogan/modlogan/group.host.conf,grouphosts_generic
include = /etc/modlogan/modlogan/group.host.conf,grouphosts_ip
include = /etc/modlogan/modlogan/group.extension.conf,groupext
include = /etc/modlogan/modlogan/group.url.conf,groupurl
include = /etc/modlogan/modlogan/group.searchengines.conf,group_searchengines
include = /etc/modlogan/modlogan/ignore.searchengines.conf,ignore_searchengines
include = /etc/modlogan/modlogan/match.searchengines.conf,match_searchengines
maxhostcacheentries = 100
## max count of hits per visit
# kill endless visits
max_hits_per_visit = 1000
debug_searchengines = 0
visit_timeout = 1800
debug_visits = 0
# log ungrouped searchengines
log_ungrouped_searchengines = 0
log_ungrouped_searchengines_file = ungrouped_searchengines.txt
# decode searchstring
decode_searchstrings = 1
# Hide supplementary files such as images
hideurl="\.(?i:gif|png|jpe?g|css|js|class|mid|swf)(?:\?|$)"
# Hide Robots / Bookmarks from main Report
hideurl="^/(?:robots.txt|favicon.ico)$"
# Direct Accesses (no known referrer)
groupreferrer="^-$",(Direct Access / no known referrer)
groupsearchstrings="cache:.*? ",(Google Cache)
# group lowercase
groupsearchstrings="^(.*)$",$_1
# Some special common broken links
groupbrokenlinks="favicon\.ico$",Bookmarking Icons for MSIE 5.0, Galeon
groupbrokenlinks="robots\.txt$",Robot control file /robots.txt
# url that should be counted as pages
## pages that end with a '/' are index-pages
pagetype="/$"
## default page names - single expression for speed
pagetype="\.(?i:php[34]?|html?|phtml|shtml|asp|cgi|pl|jsp)(?:\?|$)"
# To hide downloads such as Postscript, include this via
# include = modlogan.def.conf,hide_downloads
[hide_downloads]
hideurl="\.(?i:mp3|mpg|pdf|ps|ps\.gz|zip|tgz|deb|rpm|rar|tar\.gz|bz3)$"
########## OUTPUT Section
[output_modlogan]
## < 0 for all, 0 for none
maxrequrls = 30
maxrefurls = 30
maxos = 50
maxhosts = 30
maxentrypages = 10
maxexitpages = 10
maxindexedpages = 20
maxua = 30
maxreqprot = 10
maxreqmeth = 10
maxstatuscodes = 10
maxrobots = 20
maxbookmarks = 20
maxbrokenlinks = 20
maxsearchengines= 20
maxsearchstrings= 30
maxinteralerrors= 20
maxcountries = 20
maxextensions = 20
maxvisitpaths = 20
maxvisitdurations = 20
maxvisitpathlengths = 20
maxviewdurations = 20
maxvhosts = 100
maxgraphedmonths = 13
showdailygraph = 1
showmonthlygraph = 1
showhourlygraph = 1
showcountrygraph = 1
showvhostgraph = 1
showmonthinmenu = 1
showmonthlymaxima = 1
showmonthlygraphgrid = 1
grid = #000000
showvalidationlinks = 1
assumedprotocol = http
pagestyle = seppage
## Template names
#htmlheader = header.ihtml
#htmlfooter = footer.ihtml
# this is NOT how the file in the output will be called!
# this is the file name of the source file.
cssfile = /etc/modlogan/modlogan/modlogan.css
# HTML colors are in the CSS file, these colors are for
# generating the graphics only.
background = #ffffff
foreground = #000000
border = #000000
shadow = #999999
pages = #00c0ff
files = #0080ff
visits = #ffff00
xfer = #ff0000
hits = #00C030
country_circle = #AF0000
country_circle = #FF0000
country_circle = #FF6400
country_circle = #FFB900
country_circle = #8CFF00
country_circle = #00C800
country_circle = #007B00
country_circle = #0058FF
country_circle = #009EFF
country_circle = #0000FF
country_circle = #000082
# Vhost chart colors
# added by sysman@sysman.net
vhost_circle = #CC9933
vhost_circle = #FF0066
vhost_circle = #FF6600
vhost_circle = #FFBB00
vhost_circle = #CCFF00
vhost_circle = #00CC00
vhost_circle = #008800
vhost_circle = #0066FF
vhost_circle = #00CCFF
vhost_circle = #0000FF
vhost_circle = #000099
########## Webalizer-Lookalike output section
[output_webalizer]
maxrequrls = 30
maxrefurls = 30
maxos = 50
maxhosts = 30
maxentrypages = 10
maxexitpages = 10
maxindexedpages = 20
maxua = 30
maxreqprot = 10
maxreqmeth = 10
maxstatuscodes = 10
maxrobots = 20
maxbookmarks = 20
maxbrokenlinks = 20
maxsearchengines= 20
maxsearchstrings= 30
maxinteralerrors= 20
maxcountries = 20
# colors
# the notation is #RRGGBB (HTML-color-tripple)
background = #c0c0c0
shadow = #808080
pages = #00c0ff
files = #0080ff
visits = #ffff00
xfer = #ff0000
hosts = #ff8000
hits = #00C030
grouping = #D0D0E0
body = #FFFFFF
########## TEXT Output Section
[output_text]
########## TKControl Output
[output_tkcontrol]
maxcallednumbers = 20
maxcallingnumbers = 20
background = #c0c0c0
shadow = #808080
outgoing = #00c0ff
incoming = #00C030
grouping = #D0D0E0
body = #FFFFFF
calls = #00ffff
########## COMMON LOGFILE FORMAT input section
[input_clf]
include = /etc/modlogan/modlogan/match.useragents.conf,match_useragents
# Default input is stdin
inputfile = -
########## Microsoft IIS input section
[input_msiis]
include = /etc/modlogan/modlogan/match.os.conf,matchos
include = /etc/modlogan/modlogan/match.ua.conf,matchua
# Default input is stdin
inputfile = -
[input_wuftpd]
# Default input is stdin
inputfile = -
[input_realserver]
# Default input is stdin
inputfile = -
[input_squid]
# Default input is stdin
inputfile = -
[output_template]
# {NAME} and {DATE} will be replaced. The rest of the filename is yours
filename_pattern = mla-{NAME}-{DATE}.html
index_filename = index.html
template_path = /usr/share/modlogan/themes/
template_name = basic
assumedprotocol = http
[output_template_reports_web]
# enabling all available reports for the web-logs
report = web_request_url
report = web_request_url_traffic
report = web_request_protocol
report = web_request_method
report = web_request_status
report = web_request_extensions
report = web_request_extensions_traffic
report = web_user_users
report = web_user_users_traffic
report = web_user_referer
report = web_user_os
report = web_user_os_visits
report = web_user_host
report = web_user_host_visits
report = web_user_useragent
report = web_user_useragent_visits
report = web_user_bookmarks
report = web_user_countries
report = web_user_countries_visits
report = web_user_view_duration
report = web_user_view_duration_visits
report = web_user_view_duration_average
report = web_visit_entry_pages
report = web_visit_exit_pages
report = web_visit_path
report = web_visit_path_length
report = web_visit_duration
report = web_robot_indexed_pages
report = web_robot_names
report = web_robot_searchengine
report = web_robot_seachstrings
report = web_server_broken_links
report = web_server_internal_errors
report = web_server_vhosts
report = web_generic_summary
report = web_generic_hourly
report = web_generic_daily
[output_template_menu_web]
## create a menu for the reports
## with menuentry you can build menu-tree
## menuentry = <parent>,<child>
##
## The first used parent is the root node, here: start
##
## if <child> is the name of a report, the specified report is assigned
## to this menuentry
menuentry = start,web_generic_summary
menuentry = start,web_generic_hourly
menuentry = start,web_generic_daily
menuentry = start, req
menuentry = start, user
menuentry = start, visits
menuentry = start, robots
menuentry = start, server
## declare a title for the pages which are not assigned to a report
menutitle = start, Top
menutitle = req, Requests
menutitle = user, Users
menutitle = robots, Robots
menutitle = server, Server
menutitle = visits, Visits
menuentry = req,web_request_url
menuentry = req,web_request_url_traffic
menuentry = req,web_request_protocol
menuentry = req,web_request_method
menuentry = req,web_request_status
menuentry = req,web_request_extensions
menuentry = req,web_request_extensions_traffic
menuentry = req,web_user_users
menuentry = req,web_user_users_traffic
menuentry = user,web_user_referer
menuentry = user,web_user_os
menuentry = user,web_user_os_visits
menuentry = user,web_user_host
menuentry = user,web_user_host_visits
menuentry = user,web_user_useragent
menuentry = user,web_user_useragent_visits
menuentry = user,web_user_bookmarks
menuentry = user,web_user_countries
menuentry = user,web_user_countries_visits
menuentry = user,web_user_view_duration
menuentry = user,web_user_view_duration_visits
menuentry = user,web_user_view_duration_average
menuentry = visits,web_visit_entry_pages
menuentry = visits,web_visit_exit_pages
menuentry = visits,web_visit_path
menuentry = visits,web_visit_path_length
menuentry = visits,web_visit_duration
menuentry = robots,web_robot_indexed_pages
menuentry = robots,web_robot_names
menuentry = robots,web_robot_searchengine
menuentry = robots,web_robot_seachstrings
menuentry = server,web_server_broken_links
menuentry = server,web_server_internal_errors
menuentry = server,web_server_vhosts
[output_template_menu_web_german_titles]
menutitle = start, Start
menutitle = req, Anfragen
menutitle = user, Nutzer
menutitle = robots, Roboter
menutitle = server, Server
menutitle = visits, Besuche
[output_template_reports_mail]
report = mail_daily
report = mail_hourly
report = mail_sender
report = mail_sender_traffic
report = mail_receipient
report = mail_receipient_traffic
report = mail_incoming_domains
report = mail_incoming_domains_traffic
report = mail_outgoing_domains
report = mail_outgoing_domains_traffic
[output_template_reports_mail_qmail]
report = mail_qmail_queue_pollution
[output_template_reports_mail_virus]
report = mail_virus
report = mail_scanner
report = mail_subject
[output_template_menu_mail]
menuentry = start, mail_daily
menuentry = start, mail_hourly
menuentry = start, email
menuentry = start, domains
menuentry = email, mail_sender
menuentry = email, mail_sender_traffic
menuentry = email, mail_receipient
menuentry = email, mail_receipient_traffic
menuentry = domains, mail_incoming_domains
menuentry = domains, mail_incoming_domains_traffic
menuentry = domains, mail_outgoing_domains
menuentry = domains, mail_outgoing_domains_traffic
menutitle = start, Top
menutitle = email, Mail-Adresses
menutitle = domains, Domains
[output_template_menu_mail_german_titles]
menutitle = start, Hier gehts los
menutitle = email, Email-Adressen
menutitle = domains, Domains
[output_template_menu_mail_qmail]
menuentry = start, qmail
menuentry = qmail, mail_qmail_queue_pollution
menutitle = qmail, Qmail
[output_template_menu_mail_virus]
menuentry = start, virus
menuentry = virus, mail_virus
menuentry = virus, mail_scanner
menuentry = virus, mail_subject
menutitle = virus, Virus Information
[output_template_localizer]
report = web_user_location_cities
report = web_user_location_provinces
report = web_user_location_countries
report = web_user_location_provider
menuentry = user,web_user_location_cities
menuentry = user,web_user_location_provinces
menuentry = user,web_user_location_countries
menuentry = user,web_user_location_provider
|