I have been looking at logging user / anonymous access in Confluence, and there are several ways to do this, but very few with "the full monty"
To compare, I have made a "list" after best effort on what we are getting/not getting from each method.
Apache/NGIX Access Log
If You have an Apache or NGIX (or similar) in front of Apache, taking the log from here is typically straight forward, as it more or less contains:
62.145.36.18 - - [06/Feb/2017:15:14:11 +0100] "GET /display/ATLASSIAN/JIRA+as+CMDB HTTP/1.1" 200 18790 "https://www.google.nl/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 62.145.36.18 - - [06/Feb/2017:15:14:13 +0100] "GET /s/e052e137f250dc11172248580574573a-CDN/en_GB/6441/c568f796f3f8ace564a3b6ddb68509c75e50e3a9/d542c7242aba64cb6167bf236f7afc02/_/download/contextbatch/css/_super/batch.css?atlassian.aui.raphael.disabled=true HTTP/1.1" 200 90179 "http://www.mos-eisley.dk/display/ATLASSIAN/JIRA+as+CMDB" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 62.145.36.18 - - [06/Feb/2017:15:14:13 +0100] "GET /s/en_GB/6441/c568f796f3f8ace564a3b6ddb68509c75e50e3a9/479/_/styles/colors.css HTTP/1.1" 200 2923 "http://www.mos-eisley.dk/display/ATLASSIAN/JIRA+as+CMDB" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 62.145.36.18 - - [06/Feb/2017:15:14:13 +0100] "GET /s/d41d8cd98f00b204e9800998ecf8427e-CDN/en_GB/6441/c568f796f3f8ace564a3b6ddb68509c75e50e3a9/5.1.5/_/download/batch/com.refinedwiki.confluence.plugins.theme.original:batch/com.refinedwiki.confluence.plugins.theme.original:batch.css HTTP/1.1" 200 7780 "http://www.mos-eisley.dk/display/ATLASSIAN/JIRA+as+CMDB" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
| What | Comment | |
|---|---|---|
| Timestamp |  | |
| Remote IP | | |
| Username |  | Apache has no user context |
| Pagename | | Apache has no app context. An URL is logged, but this can be something like http://www.mos-eisley.dk/viewpage.action?id=1000 |
| URL | | |
| Return HTTP Code | | |
| Responsetime | | |
| UserAgent | |
Tomcat Valve Logging
As in the link: https://confluence.atlassian.com/confkb/how-to-enable-user-access-logging-182943.html
Log sample:
2017-02-06 18:56:36,633 INFO [http-nio-8090-exec-24] [atlassian.confluence.util.AccessLogFilter] doFilter - GET http://www.mos-eisley.dk/display/khvg145/2010/07/12/Papirer+fra+Vendia+er+ankommet 518258-23894 180 0:0:0:0:0:0:0:1 2017-02-06 18:56:40,654 INFO [http-nio-8090-exec-18] [atlassian.confluence.util.AccessLogFilter] doFilter - GET http://www.mos-eisley.dk/download/attachments/10027086/drengen%20i%20kufferten-christopher-1b-2011.wmv 476473-548 164 0:0:0:0:0:0:0:1 2017-02-06 18:56:53,740 INFO [http-nio-8090-exec-24] [atlassian.confluence.util.AccessLogFilter] doFilter - GET http://www.mos-eisley.dk/media/FamilieBilleder/Kaeledyr/Mikkel/thumbs/800pxHigh/DSC01632.JPG 354076 13 0:0:0:0:0:0:0:1
| What | Comment | |
|---|---|---|
| Timestamp | | |
| Remote IP | | Not if there is a proxy in front, then the IP =0:0:0:0:0:0:0:1 |
| Username | | Apache has no user context |
| Pagename | | Apache has no app context |
| URL | | |
| Return HTTP Code | | |
| Responsetime | | |
| UserAgent | |
Confluence Event Logging
Is possible to use Apatavists Scriptrunner for Confluence to create an Event Handler that logs Page Access (View, Update, Delte etc etc) and Blogs and so on.
Google Analytics
The best is Google Analytics, that get it all, - but the "small" downside it is client side. And using Google Analytics is not allowed in all organisations.
| What | Comment | |
|---|---|---|
| Timestamp | | |
| Remote IP | | |
| Username | | |
| Pagename | | |
| URL | | |
| Return HTTP Code | | |
| Responsetime | | |
| UserAgent | |