The NCSA Combined log is an extension of the NCSA Common log. The Combined format contains the same information as the Common log plus three (optional) additional fields: the referral field, the user_agent field, and the cookie field.

A "combined" log file format is like this:
216.67.1.91 - leon [01/Jul/2002:12:11:52 +0000] "GET /index.html HTTP/1.1" 200 431"http:/www.loganalyzer.net/" "Mozilla/4.05 [en] (WinNT; I)" "USERID=CustomerA;IMPID=01234"

The following are the fields in Combined log format (with the three additional fields shown in bold):
host rfc931 username date:time request statuscode bytes referrer user_agent cookie

NCSA Web Log Analysis..
Reports of NCSA Logs..

LogQuest VF can verify, analyze and generate report for NCSA Common Weblogs. You need to collect NCSA Combined Weblog logs and then verify in LogQuest VF.

Report based on the file:/WebLogs/NCSA/combined/backup/access_web2_log_20051231
Pre-defined Log Format:NCSA_Group/NCSA_Combined
Date report was created:20th November 2007

a)Report Conditions are:
condition(1)=Data: *,Column: Col1_Host,Logic: Contain,Rule: Count,Mode: Single
Condition(2)=Data: *,Column: Status code,Logic: Contain, Rule: Count,Mode: Single
Condition(3)=Data: ,Column: referrer, Logic: Contain,Rule: Total Sum,Mode: Single
Condition(4)=Data: , Column: bytes,Logic: Contain,Rule: Total Sum,Mode: Single

b)Report Conditions are:
condition(1)=Data: *,Column: requested resource,Logic: Contain,Rule: Count,Mode: Single
Condition(2)=Data: ,Column: Protocol Version,Logic: Contain, Rule: Total Sum,Mode: Single
Condition(3)=Data: *,Column: referrer, Logic: Contain,Rule: Count,Mode: Single

LogQuest-C Download|E-mail:support@innerbus.com
We are thankful to you for visting the homepage of Innerbus Company Limited,
a Professional Log Analysis Enterprise