Sort the summary output by search key.
Ignore case when looking for search keys in access records
Allows you to specify the name of the access log to process, thereby
overriding the default (/var/log/httpd-access.log).
Display help information and exit.
Do not ignore addresses found in
List the ignored addresses in the summary output. Canceled by the
presence of the -i command.
Quiet mode - suppresses output of final summary information.
Try to determine the hostname of each access by doing a reverse lookup
on the IP address. This forces the program to display each record as
it is discovered (the opposite of the -s option).
Suppress display of the individual matching records and only show the
totals. This forces the suppression of reverse lookups since they
wouldnt be displayed anyway (the opposite of the -r option).
Display detailed program version information and exit.
You typically do not want your own addresses to appear in a web log analysis. 'waccess' has the ability to ignore records containing any one of a set of addresses (partial or complete IP quads) you specify. You do this by editing the .waccessignored file in your home directory. Each line of this file should contain a full or partial IP quad. No comments, whitespace, blank lines or other information should appear in this file. Addresses found in this file will be ignored by 'waccess' and never appear in the output. (However, records matching these addresses do count toward the total records processed count.)
Suppose you are running an internet-facing machine with address 126.96.36.199 and an internal network on 192.168.3.*. Then your .waccessignored file might look like this:
Accesses from any of these address spaces to your web server would then be ignored by 'waccess'.
This feature is disabled with the '-i' option.
You can see which addresses are being ignored with the '-l' option. This will cause a list of ignored addresses to be included in the summary output.
Searches the web access log displaying all access records containing the string 'myreport.pdf'. When log search is finished, 'waccess' displays the total number of records examined and how many matching entries were found.
waccess -r myreport.pdf
Searches the web access log displaying all access records containing the string 'myreport.pdf'. This time, for each matching record, 'waccess' will try to figure out (and display) the hostname of the accessing machine via a reverse IP lookup.
waccess -s myreport.pdf
Look for and count records in the web access log containing 'myreport.pdf', but do not display them. Only display the totals when the analysis is complete.
You must have a reasonably current copy of python installed for 'waccess' to operate.
'waccess' is set up to process 'apache' access logs, but the field definitions are symbolic within the program and should be easy to modify for other log layouts.
~./waccessignored - optional file which contains complete or partial IP quads to ignore during processing.
None known as of this release.
Tim Daneliuk firstname.lastname@example.org