Purpose The purpose of the Log Analysis demo is to illustrate how QlikView can be used by IT to analyze log files from in-house servers and applications. It provides a way for IT to read and analyze the numerous log files that are generated throughout the day in an easy-to-read format. By using QlikView to do this irregularities, trends and patterns in the data can be easily identified and acted upon. For demo purposes, the Log Analysis demo has a last reload date of Monday, April 30, 2012.
Data The data for the Log Analysis demo comes from three overall sources: 1. Operating System (OS) log files 2. Internet Information Services (IIS) log files 3. Application log files In the data model the log files were associated using the date timestamp that is included in each log file.
Analysis Below is some of the analysis that can be performed in the Log Analysis demo by sheet: Dashboard - The Dashboard provides an overview of the number of errors and warnings logged in three areas: operating system, internet information services (IIS) and application server. Quickly see where the errors have increased in the selected timeframe to determine your next action. Operating System - The Operating System sheet focuses on operating system log entries by level and server. Use this sheet to analyze the error events and their frequency by server. IIS - The Internet Information Services Activity sheet analyzes the IIS logs by status, method, user agent and server. Use this sheet to track and monitor the status of log entries across servers to ensure they are within the appropriate range. Application - The Application sheet takes a look at application log files with a focus on errors, server restarts, user and document access, performance and session activity. Use this sheet to determine when users are most active on the server and which documents are viewed the most and by whom. On all sheets, use the Filter by date to select a specific timeframe or choose one of the timeframes already provided.
Log Analysis Demo
Conclusion The Log Analysis demo can be used by IT personnel to get a better overview of the log entries that are created by their servers and applications. It can provide a starting point for users to see if there has been an increase or decrease in errors across their systems and allows them the ability to drill down to the specific error(s). By combining all of the log files in one place, users are able to detect patterns or trends in their data that they may not have otherwise been able to see checking individual log files independent of one another.