Not showing previously archived logs 7 days or older

Avatar
  • updated
  • Answered
I currently have a few profiles for IIS sites we host pointing to multiple directories and analyzing as load balanced logs. The problem I am having is I am only seeing the last 7 days of logs in the report within the webserver even though we analyzed logs previous to those 7 days before. We archive logs 7 days old or older. Is there a setting I have off? I checked my cache settings and it's enabled. I want to see previously archived data when it processed these files.
cache log files
Avatar
Michael
Quote from Colin L.
ok, but I would like to analyze and dump to an internal database to save of disk cost. Having 5+ years of logs eats up a lot of disk space. Can I delete and "touch" the file so I don't have the files out there, the datetime stamp would be different but the content would be empty? Is this on the roadmap to add this functionality?
It's not possible to delete or modify log files but keep analysis results for them, as the program checks both datetime and log size and reanalyzes log files if it detects that some files were replaced or truncated.

We considered adding support for using log cache as an archive with ability to delete old log files but decided not to implement this feature. The main problem is that the program is very customizable and supports a lot of settings that affect analysis results. E.g. it is possible to modify predefined report tables in the program options or create new filters in the profile properties. If any of such settings is changed, WebLog Expert needs to reanalyze all the log files to create a new report, it cannot just use an existing database. So it is still necessary to keep old log files in this case. And as log files should be kept anyway, we decided to always generate reports for existing log files only to avoid confusion.
Avatar
Colin L.
ok, but I would like to analyze and dump to an internal database to save of disk cost. Having 5+ years of logs eats up a lot of disk space. Can I delete and "touch" the file so I don't have the files out there, the datetime stamp would be different but the content would be empty? Is this on the roadmap to add this functionality?
Avatar
Michael
The program always generates reports for the currently available log files only. The built-in cache is only intended to speed up analysis and to be a data source for dynamic HTML reports. You can find detailed information on how WebLog Expert uses the built-in cache here.

The simplest way to process all the logs in your case is to archive them to another folder once per day and point the program to this folder. You can compress the logs as the program can read ZIP, GZ and BZ2 compressed logs without need to unpack them.