设置Tomcat访问日志

现在我来和大家介绍一下利用tomcat产生的访问日志数据，我们能做哪些有效的分析数据？

首先是配置tomcat访问日志数据，默认情况下访问日志没有打开tomcat 日志分类，配置的方式如下：

编辑 ${catalina}/conf/server.xml文件.注:${catalina}是tomcat的安装目录

把以下的注释(<!-- -->)去掉即可。

<!--

at org.apache.catalina.valves.accesslogvalve.invoke(accesslogvalve.java:541)。 at org.apache.catalina.valves.accesslogvalve.invoke(accesslogvalve.java:936) 。at org.apache.catalina.valves.accesslogvalve.invoke(accesslogvalve.java:950)。

prefix="localhost_access_log." suffix=".txt"。 prefix="localhost_access_log." suffix=".txt"。prefix="localhost_access_log" suffix=".txt"。

pattern="common" resolveHosts="false"/>

-->

其中 directory是产生的目录 tomcat安装${catalina}作为当前目录

pattern表示日志生产的格式，common是tomcat提供的一个标准设置格式。其具体的表达式为 %h %l %u %t "%r" %s %b

但本人建议采用以下具体的配置，因为标准配置有一些重要的日志数据无法生。

%h %l %u %t "%r" %s %b %T

具体的日志产生样式说明如下(从官方文档中摘录)：

* %a - Remote IP address

* %A - Local IP address

* %b - Bytes sent, excluding HTTP headers, or '-' if zero

* %B - Bytes sent, excluding HTTP headers

in the simplest form, one or more ip addresses or host names canbe listed individually, and each will be tried in turn. it's a fatal error if anyip address is malformed or if a domain name is not resolvable, butit's allowed (and pointless) to mention the same address more than once.。this is save to ignore, provided that the ip address and the name (remote) are referencing an old, previous or same-subnet domain.this is just a warning about a recieved netbios name that is being ignored cause it's not part of our ad.。when a host has more than one ip, you can force the ip used by the udp messages. this is usefull if the primary ip address of the machine is not the ip address of the server (thisip).。

* %H - Request protocol

* %l - Remote logical username from identd (always returns '-')

* %m - Request method (GET, POST, etc.)

* %p - Local port on which this request was received

* %q - Query string (prepended with a '?' if it exists)

* %r - First line of the request (method and request URI)

* %s - HTTP status code of the response

* %S - User session ID

* %t - Date and time, in Common Log Format

* %u - Remote user that was authenticated (if any), else '-'

* %U - Requested URL path

* %v - Local server name

* %D - Time taken to process the request, in millis

* %T - Time taken to process the request, in seconds

There is also support to write information from the cookie, incoming header, the Session or something else in the ServletRequest. It is modeled after the apache syntax:

* %{xxx}i for incoming headers

* %{xxx}c for a specific cookie

* %{xxx}r xxx is an attribute in the ServletRequest

* %{xxx}s xxx is an attribute in the HttpSession

现在我们回头再来看一下下面这个配置 %h %l %u %t "%r" %s %b %T 生产的访问日志数据，我们可以做哪些事？

先看一下，我们能得到的数据有:

* %h 访问的用户IP地址

* %l 访问逻辑用户名tomcat 日志分类，通常返回'-'

* %u 访问验证用户名，通常返回'-'

* %t 访问日时

* %r 访问的方式(post或者是get)，访问的资源和使用的http协议版本

* %s 访问返回的http状态

* %b 访问资源返回的流量

* %T 访问所使用的时间

有了这些数据，我们可以根据时间段做以下的分析处理(图片使用jfreechart工具动态生成)：

* 独立IP数统计

* 访问请求数统计

* 访问资料文件数统计

* 访问流量统计

* 访问处理响应时间统计

* 统计所有404错误页面

* 统计所有500错误的页面

* 统计访问最频繁页面

* 统计访问处理时间最久页面

* 统计并发访问频率最高的页面

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-108000-1.html