[analog-help] Analog taking very log to process

[Pam Drew at Home]

I'm in the (apparent) minority of Windows admins on this 
list.  I use QuickDNS myself, and have found it easy & 
reliable.

I just installed it, and wrote a batch file that points 
QuickDNS to my analog.cfg file where it finds the path to 
the IIS log files to process.  Then, make sure that your 
analog.cfg is set to read the DNS cache created by 
QuickDNS.

my batch is a whopping two lines:
qdns /G something.cfg /Y 192.168.1.1      (where 
192.168.1.1 is the IP of my DNS server)
call analog.exe +gsomething.cfg


and something.cfg has this:

DNSFILE dnscache.txt
DNS read


On Tue, 06 Feb 2007 18:05:15 +0000 Alan Wright 
<a.d.wright at derby.ac.uk> wrote:

> 
> Use one of the helper applications which work a lot 
>quicker than analog.
> 
> http://www.analog.cx/helpers/index.html#dns
> 
> QuickDNS has worked for me quite well but as I'm mainly 
>on a Solaris system I use DNSTran.
> 
> Rgds
> 
> Alan Wright
> IT Support Technician
>Faculty of Education, Health & Sciences
> University of Derby
> Western Road, Mickleover, DE3 9GX
> 
> http://psychology.derby.ac.uk
> 
> 
> At 17:38 06/02/2007, you wrote:
>>Stephen,
>>
>>Wow!  What a difference!  It was the DNS.  I had DNS set 
>>to WRITE per the
>>IIS 6.0 How-To.  When set to NONE it flew through the log 
>>files.
>>
>>This server has 2GB of memory so I couldn't imagine it 
>>was that.
>>
>>One question...If I did want DNS info what is the best 
>>way to capture that
>>for future reports to run quickly?
>>
>>Perfect! Thanks!
>>
>>Chip
>>
>>
>>-----Original Message-----
>>From: analog-help-bounces at lists.meer.net
>>[mailto:analog-help-bounces at lists.meer.net] On Behalf Of 
>>Stephen Turner
>>Sent: Tuesday, February 06, 2007 12:13 PM
>>To: Support for analog web log analyzer
>>Subject: Re: [analog-help] Analog taking very log to 
>>process
>>
>>Have you got DNS lookups turned on? If so, turn them off.
>>
>>Other than that, you may be running out of memory. If the 
>>Task Manager shows
>>a high memory usage for analog but low CPU, and you have 
>>a lot of disk
>>activity, this is your problem. In that case, try the 
>>command
>>   HOSTLOWMEM 3
>>
>>--
>>Stephen Turner