G43beli
G43beli

Reputation: 3952

Log Analyzer Tools for IIS Webserver Logs

I used Deep Log Analyzer to monitor my site visits. What I noticed now, is that there is way too much traffic reported than it actually should be reported based on google analytics. I started to use GA now but I need to create a clean report from April 2017 until November 2017 based on the iis logs.

I got all of the log files from IIS. But now I'm looking for a way to filter spam like /wp-admin Brute-Force stuff and to monitor just the 'real' visitors data without bots and internal refferers.

Is there any better tool for that kind of log reporting or is there a way to achieve that goal in Deep Log Analyzer?

I tried to filter the reports but It still seems to have too much hits.

I just need the following information:

Total Visits, Amount of users, average session time, and device (if mobile or desktop)

thanks for recommendations and help

EDIT: best solution I found: http://www.weblogexpert.com/

Upvotes: 5

Views: 52969

Answers (3)

Jimbo
Jimbo

Reputation: 22964

I realize Im a bit late to the party but, having tried a bunch of freeware tools out there I can say with certainty that HttpLogBrowser (https://www.iis.net/downloads/community/2017/04/httplogbrowser) is the best of the bunch

  • Really quick to load up one or more log files for analysis
  • Not sluggish when browsing/searching/filtering the data (despite using very little memory)
  • Extremely useful visual representations of logged data

Upvotes: 6

lii5a
lii5a

Reputation: 15

You could do this with the free edition of SpectX. Download and point it to your IIS log folder. Tutorials and sample queries:

Parsing IIS logs

Analyzing IIS Logs

Analyzing IIS logs: Microsoft Exchange, OWA and ActiveSync Activities

A very basic way of filtering out bots is to configure SpectX to access Maxmind's GeoIP databases and then use the filter_out command. For example:

| filter_out(asname(c_ip) = ‘AS15169 Google LLC’ and cs_user_agent like ‘%Googlebot/%‘)
| filter_out(asname(c_ip) = ‘AS8075 Microsoft Corporation’ and cs_user_agent like ‘%BingPreview/%‘)
| filter_out(asname(c_ip) = ‘AS8075 Microsoft Corporation’ and cs_user_agent like ‘%bingbot/%‘)
| filter_out(asname(c_ip) = ‘AS32934 Facebook, Inc.’ and cs_user_agent like ‘%facebookexternalhi%‘)
| filter_out(asname(c_ip) = ‘AS14618 Amazon.com, Inc.’ and cs_user_agent like ‘%SMTBot/%‘)
| filter_out(asname(c_ip) = ‘AS714 Apple Inc.’ and cs_user_agent like ‘%Applebot/%‘)
| filter_out(asname(c_ip) = ‘AS13238 YANDEX LLC’ and cs_user_agent like ‘%YandexBot/%‘)
| filter_out(asname(c_ip) = ‘AS13238 YANDEX LLC’ and cs_user_agent like ‘%YandexMobileBot/%’)

Upvotes: -1

Related Questions