mc3.tcl

tkweblog.tcl

Description	Usage	Requirements
Screen Shots	Key Bindings	Todo List

Description

tkweblog.tcl is a web log analysis tool. It can parse and query a number of Apache compliant log formats.

Screen Shots

The Main Window

Usage

Using tkweblog.tcl is generally a 5 step process represented by the 5 widgets presented at the top of the main window:

Select log type Using the option menu in the top right part of the main window, select the log type you intend to parse. The formats currently supported are:

common

referer

agent

combined

Select File Select the log file you would like to parse.

Parse Parse the selected file.

Lookup Hosts If your log files only log host IPs, this will exec nslookup to resolve host addresses.

Search Enter a search query and click the search button to perform the search.

The most complex part of this tool is the search expression syntax that is enterred in the search entry. Clicking on the button with the "?" will post a window explaining usage of the search expression and also some examples. In general, the search expression is evaluated as the expression of a TCL conditional statement. So, it can essentally accept any legal TCL code.

Command Line Args

There are currently no command line arguments.

Key Bindings

<Double-Escape> Exit

<Control-O> Select File

<Control-P> Parse File

<Control-L> Lookup Hosts

<Enter> In search entry will cause search to be executed.

<F1> Will cause search to be executed.

Requirements

The tcl.prehiti.net libraries

The nwidg.tcl library is used for simplified layout.
The oolist.tcl library is used for the multi-column list view widget.
The oohelp.tcl library is used for the help window and baloon help.

Tcl/Tk 8.2 or greater
IncrTcl 3.0 or greater
nslookup executable should be in your path... without it you will not be able to resolve host IPs as hostnames.

Todo List

Bugs

The progress dialog is modal. Clicking on an operation that will post the progress dialog when the progress dialog is already posted will cause an error.
Sometimes, when switching log types, some widgets aren't realized in the right order and an innocuous error is posted.

General

The database of supported log formats could be externalized. Thus any flat file format that could be described with a regular expression could be parsed and queried by this tool.

Select log type	Using the option menu in the top right part of the main window, select the log type you intend to parse. The formats currently supported are: common referer agent combined
Select File	Select the log file you would like to parse.
Parse	Parse the selected file.
Lookup Hosts	If your log files only log host IPs, this will exec nslookup to resolve host addresses.
Search	Enter a search query and click the search button to perform the search.

<Double-Escape>	Exit
<Control-O>	Select File
<Control-P>	Parse File
<Control-L>	Lookup Hosts
<Enter>	In search entry will cause search to be executed.
<F1>	Will cause search to be executed.