bt-LogAnalyzer SE^TM Frequently Asked Questions

Q: How to Purge LogAnalyzer SE™ databases: Manual and Automatic?

To maintain a manageable LogAnalyzer SE database size, the database for log data must be purged periodically. This is done on a per-log source basis, and can be done either manually or automatically.

Manual Purge:

1. In the ‘Log Source List’ page, select/highlight the desired log source to purge
2. In the left-hand menu and under the ‘Log Source List’ section, select the ‘Purge Data’ option
3. You are given the option to purge pre-set time intervals, a custom time interval, or to completely purge all log data. Once you select the desired amount of log data to purge, click the ‘Purge’ button, then click ‘OK’ to begin the purge

Automatic Purge:

1. In the ‘Log Source List’ page, navigate to the properties of the log source that is to be automatically purged
2. Click on the ‘Automatic Purge’ tab
3. Mark the checkbox labeled ‘Delete log data older than _ calendar days, according to the following schedule:’, then input the desired value for the maximum age of log data
4. Enter the date and time to start the purge
5. Select your desired ‘Recurrence Schema’
6. If desired, notifications for purge success and/or failure can be configured to be sent to the specified email recipients
   NOTE: The SMTP settings must be configured in the application for email notifications to function properly.
7. Once the desired settings have been configured, save the changes by clicking ‘OK’ or ‘Apply’
8. The automatic purge operation will begin on the configured date/time, and will recur as configured

Q: How to delete obsolete reports to maintain Database size?

1. Launch the bt-LogAnalyzer SE™ Web Interface
2. Login to the application with the Administration password in the upper right corner
3. Click on the 'Reports' option on the top navigation bar
4. Locate the report that you want to clear the results for and select 'Report Generation History' from the 'Reports' Quick Navigation bar on the middle left of the page
5. Highlight the report results and select 'Delete Report Result

Q: Restrict access to LogAnalyzer SE™?

To restrict access to the LogAnalyzer SE™ interface to authorized users you will need to configure the site permissions in IIS.

In IIS5:

1. Open Internet Information Services and navigate to the properties of 'LogAnalyzer7'
2. On the 'Directory Security' tab, click 'Edit' under the 'Anonymous access and authentication control' section
3. Make sure 'Integrated Windows authentication' is unchecked, and that 'Basic authentication' is checked
4. Click 'OK', then Click 'OK' again
5. Go to the web directory for LogAnalyzer SE™ and modify the properties for the accounts that should have access to the interface. Make sure the account used by the LAEEAppPool has Read and Execute, List Folder Contents, Read, and Write permissions
6. Open a Command window and type 'IISRESET'
7. When the services have been restarted, test the accounts that should have access

In IIS6:

1. Open your IIS Manager and Navigate to the 'Properties' of 'LogAnalyzer 7'
2. In the 'Directory Security' tab, click 'Edit' under the 'Authentication and access control' section
3. Make sure 'Integrated Windows authentication' is unchecked, and that 'Basic authentication' is checked.
4. Click 'OK', then Click 'OK' again
5. Navigate to the 'Permissions' section of 'LogAnalyzer 7.' Here is where you can configure what users/groups will have access to LogAnalyzer. Make sure to include the LAEEAppPool 'Identity' account as well. This can be verified by navigating to the properties of 'LAEEAppPool', and checking the account under 'Identity'
6. Open a Command window and type 'IISRESET'
7. When the services have been restarted, test the accounts that should have access

In IIS7:

Ensure that the LAEEAppPool is running with an account that has permissions to the LASE Databases:

1. Open Internet Information Services (IIS) Manager on the server where the LogAnalyzer SE™ interface is installed
2. Expand the Web server under the 'Connections' area
3. Click on 'Application Pools'
4. The 'LAEEAppPool' application pool should be listed in the middle screen. It will have a column labeled 'Identity.' This account must have rights to the LogAnalyzer SE™ Databases
5. To change the account used by the identity, right click on the 'LAEEAppPool' and select 'Advanced Settings'
6. Under the 'Process Model' section, click on the field to the right of 'Identity'
7. Click on the 3-dot button
8. Select 'Custom Account' and press the 'Set' button
9. Enter the 'User Name' in the following format (DOMAIN\USER)
10. Enter the password and confirm
11. Click 'OK' to this screen and then 'OK" at the 'Application Pool Identity' and 'Advanced Settings' dialogs
12. Under 'Actions' on the right side of IIS Manager, select the 'Stop' then 'Start' options under 'Application Pool Tasks'

To change the authentication type of the LogAnalyzer SE™ webpage:

1. Expand the 'Sites' container under the Web server in IIS Manager 'Connections' window (Default install of the LogAnalyzer SE™ Interface)
2. Click on 'LogAnalyzer7'
3. Double-click on 'Authentication' in the 'IIS' section of the middle screen
4. Make sure 'Basic Authentication' is enabled, and 'Windows Authentication' is 'Disabled'. If 'Windows Authentication' is 'Enabled', the user will not be prompted with a logon box when accessing the URL

To add the users/groups that will only have access to LogAnalyzer SE™:

1. Right-click 'LogAnalyzer7' in the left-hand 'Connections' menu
2. Click 'Edit' Permissions'
3. In the 'Web Interface Properties' window, click the 'Security' tab
4. Click the 'Edit' button
5. Remove all groups and usernames and user names that should not have access to the interface
6. Ensure that the identity used by the LAEEAppPool has 'Full Control'
7. Add any users that should have access and set the following permissions:
   a) Read & Execute
   b) List folder contents
   c) Read
   

Q: How do I adjust the bandwidth cost factor?

1. Open the bt-LogAnalyzer Web Interface
2. Enter the password for the interface in the upper right corner
3. Click on 'Settings' from the task bar
4. Click on 'Factors'
5. Enter the desired 'Bandwidth Cost Factor (per KiloByte)' value
6. Click 'OK'

Note: If you don’t wish to report on bandwidth cost factor, set factor to zero.

Q: How do I create a Custom Category?

1. Open the bt-LogAnalyzer Web Interface
2. Enter the password for the interface in the upper right corner
3. Hover over 'Categories' on the task bar and select 'New Category' from the drop-down menu that appears
4. Enter the Name and Description of the Category (Common Options tab)
5. Click the Included URLs tab
6. Enter the desired URL, website, or webpage to include into the category. Asterisks (*) may be used as wildcards. For example, to include the entire acme.com website, you would include two masks: *//acme.com* and *.acme.com*.This would ensure that both http://acme.com* and http://www.acme.com* are both categorized alike
7. Click Add
8. Repeat as necessary

If you would like to enter a Web site or Domain, but eliminate a particular page:

1. Click the Excluded URLs tab
2. Enter the desired URL, website, or webpage to exclude from the category. Asterisks(*) may be used as wildcards. For example, to exclude the fake.acme.com webpage, you would include two masks in the ‘Exclude’ tab: *//fake.acme.com* and *.fake.acme.com*. This will result in http://www.acme.com*, http://acme.com*, and any sub domain other than http://fake.acme.com being categorized as the newly created category
3. Click Add
4. Repeat as necessary

Q: How do I add a new URL to a category in bt-LogAnalyzer SE™?

1. Open the bt-LogAnalyzer Web Interface
2. Enter the password for the interface in the upper right corner
3. Hover over 'Categories' on the task bar and select 'Category List' from the drop-down menu that appears
4. Locate the category that you want to modify and select the Categories Properties button next to the red X on the right side of the table
5. Click on the 'Included URLs' option
6. Enter the proper masks for the URL that you would like to include in the category. (See 'How do I create an appropriate URL mask?')
7. When completed click 'Add'

Note: The new masks will take effect for all categorization operations after this date. To have data previously categorized utilize the new masks, please categorize all existing log data.

Q: How do I create an appropriate URL mask?

Typically the user would use two separate masks to safely filter a certain domain into a desired category.

The following examples are how the masks would be input for the domain example.com:

*.example.com*;*//example.com*

Note: Multiple masks can be entered at once when separated by a semicolon (;)

Q: How do I change Category Colors in bt-LogAnalyzer SE™?

1. Open the bt-LogAnalyzer Web Interface
2. Enter the password for the interface in the upper right corner
3. Select 'Settings' then 'Properties' from the drop-down menu
4. Click the Colors tab
5. Select the appropriate Category
6. Click the icon for the 'Category Color Properties' next to the red X on the right side
7. Select a basic color or enter the RGB color numbers
8. Click OK

Q: Setup Distributed Report Processing in bt-LogAnalyzer SE™?

The Distributed Report Processing feature allows bt-LogAnalyzer users to process reports on multiple machines and aggregate the processing into one report. Following are some benefits:

1. Multiple servers can run reports against their own logs. This distributes the workload to run reports lowering Network Bandwidth (log data is not transferred).
2. Only the summary of the report is sent back by the Remote Server to the Virtual Report Server reducing Network Bandwidth.
3. The Distributed Report Processing feature provides a transparent (“LAN-like”) communications over Local Area Networks and Virtual Private Networks.

Following are the steps to setup and initiate this functionality:

1. Select Settings | Properties from the drop down menu
2. Click the Distributed Reports tab
3. Select New Distributed Server from the left navigation pane
4. Enter the name for the LogAnalyzer SE™ distributed (remote) server(s)
5. Click OK
6. Select Reports in the left navigation pane
7. Select the appropriate report from the list
8. Click the Advanced tab
9. Check the box for Run this report at remote servers
10. Click OK

REPORT CONFIGURATION