The log files I used were about 500MB each (weekly logs) and loaded in under 5-10 minutes using WebSpy Standard. Ed -----Original Message----- From: Quillman Shawn (RBNA/CIT1.1) * [mailto:Shawn.Quillman@xxxxxxxxxxxx] Sent: Tuesday, May 13, 2003 3:43 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: 3rd Party Reporting Tools http://www.ISAserver.org I'd second this, only I'm using WebSpy Giga which I believe is optimized to analyze 2+ GB of data. I'm actually evaluating a number of things right now (based heavily on the products listed on isaserver.org) and WebSpy has made it to my final two. The other product is not a log analysis package. As far as analysis of existing logs, WebSpy seems to me to be the way to go. Very fast (comparatively) and a beautiful, intuitive interface. On a test run I did a week's worth of logs from 2 servers (7.38 GB of log data) in just over 8 minutes which comparatively speaking is _screamin'_. Other products took 1.5+ hours to analyze the same set of logs. I'm running it on a P4 1.8 with 1GB of memory and with the logs on a local disk. The import of the logs took a few minutes, but I think a big import of existing logs would be just a one shot deal. Importing subsequet logs would obviously take less time. The only thing was it will do that 8 minutes every time you drill down for detail on a user/workstation/category, etc. But if you don't have huge logs that time I would assume would be nearly negligible. -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CIT1.1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-2855 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Edward Sullivan [mailto:esullivan@xxxxxxx] Sent: Tuesday, May 13, 2003 2:56 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: 3rd Party Reporting Tools http://www.ISAserver.org Try looking at http://www.webspy.com/products/standardsuite.asp . The reports generated by this product will satisfy the requirements you mention, plus more. From my experience the product is VERY fast to load log files. If you try to use the internal DNS client resolver in WebSpy, ISA may see it as a DOS attack and shutdown ISA services. Make sure you disable DNS Intrusion before using this feature of WebSpy. Lastly, it isn't too terrible expensive, and you can get a 30 day eval. Best of luck! Ed Sullivan IT Director esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> KMA Direct Communications Confidential and Proprietary -----Original Message----- From: Sean Faust [mailto:sfaust@xxxxxxxxxx] Sent: Tuesday, May 13, 2003 1:43 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: 3rd Party Reporting Tools http://www.ISAserver.org I am looking for a product that will take the exsisting log files and generate reports that can tell managment where people are going, type of traffic and if need be who is going where. We never needed this before but we have a new CEO and he has requested this information. I have checked out the ISA.org site as I always do. Burstek looks good but there site has been down all day. Thanks Sean Faust American Red Cross Atlanta Chapter Office (404) 575-3123 Cell(404) 909-0778 sfaust@xxxxxxxxxx -----Original Message----- From: Edward Sullivan [mailto:esullivan@xxxxxxx] Sent: Tuesday, May 13, 2003 2:20 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: 3rd Party Reporting Tools http://www.ISAserver.org It might help to define "meaningful." What is meaningful to me is not always meaningful to management which may or may not be relevant to YOUR management. Ed Sullivan IT Director esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> KMA Direct Communications Confidential and Proprietary -----Original Message----- From: PETER PAPE [mailto:papexpjboi@xxxxxxx] Sent: Tuesday, May 13, 2003 1:17 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: 3rd Party Reporting Tools http://www.ISAserver.org I've been pretty happy with Surf Control. It also has a content categories and allows you to configure allowed and prohibited sites. So, it may be overkill if you're just looking for reporting. Have you looked at ISA Server.org? Seems to me that there are several products listed on the site that may meet your needs. >From: "Sean Faust" <sfaust@xxxxxxxxxx> >Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> >To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> >Subject: [isalist] 3rd Party Reporting Tools >Date: Tue, 13 May 2003 07:07:45 -0400 > >http://www.ISAserver.org > > >Good Morning Everyone, > >I have been asked to find a 3rd party tool to generate some meaningful >reports on web usage. Does anyone have any suggestions or can point me to >some vendors? > >TIA >Sean > > >------------------------------------------------------ >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ >------------------------------------------------------ >Exchange Server Resource Site: http://www.msexchange.org/ >Windows Security Resource Site: http://www.windowsecurity.com/ >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com >------------------------------------------------------ >You are currently subscribed to this ISAserver.org Discussion List as: >papexpjboi@xxxxxxx >To unsubscribe send a blank email to $subst('Email.Unsub') _________________________________________________________________ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: esullivan@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: sfaust@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: esullivan@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: esullivan@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')