Working with the Apache Log Correlation and Analyzer sample

This sample demonstrates the ability to analyze and correlate log files using the TPTP tools. This sample will use a symptom catalog to analyze an Apache error log. In addition, a time-based correlation will occur on the Apache access log. You can view the results of the analysis and correlation by exploring the various views within the Profile and Logging Perspective.

Note: the log files to be analyzed and correlated are included in this sample. To find out how to import log files, refer to the Log Parser Sample (File > New > Example... > Logging > Log Parser Sample).

Viewing the Apache Server access.log file

  1. Click on the Log Navigator tab on the Profiling and Logging Perspective.
  2. Expand the Logs tree view.
  3. Click on the Access Log File child element.
  4. From the pop-up menu of the selected child element, select Open With > Log View.
  5. Click on any log records from the Log View and view its properties.

Viewing the Apache error.log file

  1. Click on the Log Navigator tab on the Profiling and Logging Perspective.
  2. Expand the Logs tree view.
  3. Click on the Error Log File child element.
  4. From the pop-up menu of the selected child element, select Open With > Log View.
  5. Click on any log records from the Log View and view its properties.

Performing a Time-based correlation on the Apache Log files

  1. Click on the Log Navigator tab on the Profiling and Logging Perspective.
  2. Expand the Correlations tree view.
  3. Click on the Time child element.
  4. From the pop-up menu of the selected child element, select Open With > Log interactions.
  5. In the UML2 Sequence Diagram view, the interactions between the two logs are displayed.
  6. From the pop-up menu of any square (log record), select Open in Log View to views the selected log record in the Log View.

Analyzing the Apache access or error log records

  1. Click on the Log Navigator tab on the Profiling and Logging Perspective.
  2. Expand the Logs tree view.
  3. Click on the Error Log File or Time correlation child elements.
  4. From the pop-up menu of the selected child element, select Open With > Log View.
  5. From the pop-up menu of any log record in the Log Records pane, select Analyze Settings...
  6. In the Configure analysis engines... dialog clear the XPath Log Analyzer selection and select the Symptom 0.1 Log Analyzer. Close the dialog and save the updated settings.
  7. From the pop-up menu of any log record in the Log Records pane, select Analyze All.
  8. Select a log record in the Log View and from the pop-up menu, select Properties. The Properties View displaying properties of the selected log record is shown.
  9. Click on the Analysis Result tab in the Properties View to view the explanation of the problem and any possible recommendation(s) to fix the problem.