I need help creating a profile properly. I have the profile created and the associated log source is already related to it. However, the log source is currently logging for several sites, for example:
Alpha.mysite.com
Beta.mysite.com
Gamme.mysite.com
I want to be able to:
1. pull up reports for alpha.mysite.com only
2. exclude my office IP
I’ve created two filters.
One to exclude my IP as follows:
(I’ve changed my IP number to something generic for this example.)
Filter Type: Exclude Pattern
Filter Field: c_ip (Raw)
Filter Pattern: 1\.2\.3\.4
Case Sensitive: No
One to include only entries that say “alpha”
Filter Type: Include Pattern ONLY
Filter field: cs_host (RAW)
Filter Pattern: *alpha\.*
Case sensitive: No
The problem is that Urchin is generating reports when no entries exist. For example for 5/24/2005, I’m showing about 100 sessions, but the log file itself does not have any entries for alpha.mysite.com at all. At least for 5/24/2005 Urchin should be showing no activity at all for that site.
What am I doing wrong?