-2

I'm logging both web proxy and firewall traffic under the logging tab.

How would I get a top 50 list of websites that use the most traffic. I need the website addresses, not just the IP address as an IP address would be hosting several different sites.

Syntax
  • 225
  • 3
  • 9

1 Answers1

2

If you're logging in W3C format in a text file then you can run AWStats or similar over it.

From Technet:

Text File Logging

You can save ISA Server logs to a text file, in one of the following formats:

World Wide Web Consortium (W3C) format. W3C logs contain both data and directives, describing the version, date, and logged fields. Because the fields are described in the file, unselected fields are not logged. The tab character is used as a delimiter. Date and time are in Coordinated Universal Time (UTC).

ISA Server format. ISA Server format contains only data with no directives. All fields are always logged. Unselected fields are logged with a dash, to indicate that they are empty. The comma character is used as a delimiter. The date and time fields are in local time as configured on the computer.

By default, log files are saved in the %ProgramFiles%\Microsoft ISA Server\ISALogs folder.

Dom
  • 731
  • 1
  • 8
  • 19