Mail Log Analyzer - AWstats2011/05/29

	Install maillog analyzer AWstats. Web Server is also needed. Web Server is also necessarry to be installed.
[1]	Install AWstats

[root@mail ~]#

yum -y install awstats

# the config file "awstats.(hostname).conf" is automatically created

[root@mail ~]#

vi /etc/awstats/awstats.mail.srv.world.conf

# line 51: change

LogFile="

/usr/share/awstats/tools/maillogconvert.pl standard < /var/log/maillog |

# line 63: change

LogType=

# line 122 make it comment / add the line below

LogFormat=1

LogFormat="%time2 %email %email_r %host %host_r %method %url %code %bytesd"

# line 831: change like below

LevelForBrowsersDetection=

LevelForOSDetection=

LevelForRefererAnalyze=

LevelForRobotsDetection=

LevelForSearchEnginesDetection=

LevelForKeywordsDetection=

LevelForFileTypesDetection=

LevelForWormsDetection=0

# line 949: change like below

ShowMonthStats=

UHB

ShowDaysOfMonthStats=

ShowDaysOfWeekStats=

ShowHoursStats=

ShowDomainsStats=

ShowHostsStats=

HBL

ShowRobotsStats=

ShowEMailSenders=

HBML

ShowEMailReceivers=

HBML

ShowSessionsStats=

ShowPagesStats=

ShowFileTypesStats=

ShowOSStats=

ShowBrowsersStats=

ShowOriginStats=

ShowKeyphrasesStats=

ShowKeywordsStats=

ShowMiscStats=

ShowHTTPErrorsStats=

ShowSMTPErrorsStats=

[root@mail ~]#

vi /etc/httpd/conf.d/awstats.conf

ScriptAlias /awstats/ "/usr/share/awstats/wwwroot/cgi-bin/"

# add Alias

Alias /report "/usr/share/awstats/wwwroot/"

<Directory "/usr/share/awstats/wwwroot">
   Options None
   AllowOverride None
   Order allow,deny
   Allow from 127.0.0.1

10.0.0.0/24

# IP address you allow

</Directory>
# Additional Perl modules
<IfModule mod_env.c>
SetEnv PERL5LIB /usr/share/awstats/lib:/usr/share/awstats/plugins
</IfModule>

[root@mail ~]#

/etc/rc.d/init.d/httpd restart

Restarting httpd (via systemctl): Stopping httpd: [ OK ]
Starting httpd: [ OK ]
[ OK ]

# generate reports

[root@mail ~]#

/usr/share/awstats/wwwroot/cgi-bin/awstats.pl -config=mail.srv.world -update

Create/Update database for config "/etc/awstats/awstats.mail.srv.world.conf" by AWStats version 7.0 (build 1.971)
From data in log file "/usr/share/awstats/tools/maillogconvert.pl standard < /var/log/maillog |"...
Phase 1 : First bypass old records, searching new record...
Searching new records from beginning of log file...
Phase 2 : Now process new records (Flush history on disk after 20000 hosts)...
Jumped lines in file: 0
Parsed lines in file: 8
Found 3 dropped records,
Found 0 comments,
Found 0 blank records,
Found 0 corrupted records,
Found 0 old records,
Found 5 new qualified records.

# generate HTML from reports

[root@mail ~]#

/usr/share/awstats/wwwroot/cgi-bin/awstats.pl -config=mail.srv.world -output -staticlink > /usr/share/awstats/wwwroot/index.html

# change cron

[root@mail ~]#

vi /etc/cron.hourly/awstats

#!/bin/bash

# make it comment

exec /usr/share/awstats/tools/awstats_updateall.pl now -configdir="/etc/awstats" -awstatsprog="/usr/share/awstats/wwwroot/cgi-bin/awstats.pl" > /dev/null

# add

/usr/share/awstats/wwwroot/cgi-bin/awstats.pl -config=mail.srv.world -update > /dev/null
/usr/share/awstats/wwwroot/cgi-bin/awstats.pl -config=mail.srv.world -output -staticlink > /usr/share/awstats/wwwroot/index.html

exit 0

[2]	Access to 'http://(your server's name or IP address)/report/' with web browser. Then following screen is shown and it's possible to make sure mail log summary. ( "http://(your server's name or IP address)/)/awstats/awstats.pl" is also accessible )

Matched Content