Sidehistorik
...
If You have an Apache or NGIX (or similar) in front of ApacheConfluence, taking grapping the log from here is typically straight forward, as it more or less contains something like this sample:
...
But what do we get from this logging?
| What | Comment | |
|---|---|---|
| Timestamp |  | |
| Remote IP | | |
| Username |  | Apache has no user context |
| Spacename | | |
| Pagename | | Apache has no app context. An URL is logged, but this can due to special chars in the Page Title be something like http://www.mos-eisley.dk/viewpage.action?id=1000 or a Tiny Link to a Confluence page |
, hence not the Pagename | ||
| URL | | |
| Return HTTP Code | |
| This seems to only log "200 OK" requests, not "404 Page not found" | ||
| Responsetime | | |
| UserAgent | |
Tomcat Valve Logging
As in the link: https://confluence.atlassian.com/confkb/how-to-enable-user-access-logging-182943.html
The configuration is very tricky and somewhat limited ragarding to filter mappings in log
Log sample:
| Kodeblok |
|---|
2017-02-06 18:56:36,633 INFO [http-nio-8090-exec-24] [atlassian.confluence.util.AccessLogFilter] doFilter - GET http://www.mos-eisley.dk/display/khvg145/2010/07/12/Papirer+fra+Vendia+er+ankommet 518258-23894 180 0:0:0:0:0:0:0:1
2017-02-06 18:56:40,654 INFO [http-nio-8090-exec-18] [atlassian.confluence.util.AccessLogFilter] doFilter - GET http://www.mos-eisley.dk/download/attachments/10027086/drengen%20i%20kufferten-christopher-1b-2011.wmv 476473-548 164 0:0:0:0:0:0:0:1
2017-02-06 18:56:53,740 INFO [http-nio-8090-exec-24] [atlassian.confluence.util.AccessLogFilter] doFilter - GET http://www.mos-eisley.dk/media/FamilieBilleder/Kaeledyr/Mikkel/thumbs/800pxHigh/DSC01632.JPG 354076 13 0:0:0:0:0:0:0:1
2017-02-06 19:32:13,527 INFO [http-nio-8090-exec-23] [atlassian.confluence.util.AccessLogFilter] doFilter - GET http://www.mos-eisley.dk/pages/viewpage.action 1077585-29559 362 0:0:0:0:0:0:0:1 |
| What |
|---|
| Comment | ||
|---|---|---|
| Timestamp | | |
| Remote IP | | Not if there is a proxy in front, then the IP =0:0:0:0:0:0:0 |
:1 | ||
| Username | | |
| Spacename | ? | |
| Pagename | | An URL is logged, but this can due to special chars in the Page Title be something like http://www.mos-eisley.dk/viewpage.action?id=1000 or a Tiny Link to a Confluence page, hence not the Pagename. http://www.mos-eisley.dk/viewpage.action?id=1000 is just logged as http://www.mos-eisley.dk/pages/viewpage.action |
| URL | | |
| Return HTTP Code |
| ||
| Responsetime | | |
| UserAgent | |
Confluence Event Logging
...