To monitor Server activity, you can reference the Server’s log files. The Server supports W3C, Microsoft IIS, and NCSA log file formats. Server events are logged to a file named [log file format]yymmdd.log. (For example, in070822.log.)
The log file format abbreviations used in the log file name are listed in the table below:
Log File Format |
Abbreviation |
W3C |
ex |
Microsoft IIS |
in |
NCSA |
nc |
To select a log file format
In the Administrator, connect to the server, then click the Server tab.
In the right pane, click the Server Options tab.
In the Log file format list, specify the format: W3C, Microsoft IIS, or NCSA.
|
Changing the log file format disconnects all active users. You should stop all Sites or wait until all users are inactive before changing the log file format. |
Click Apply.
|
The W3C format records all times in GMT (Greenwich Mean Time). |
To select the log file output folder
In the Administrator, connect to the server, then click the Server tab.
In the right pane, click the Server Options tab.
In the Folder to save log files box, type the path for your server's log files. To browse for a path, click the open icon.
Click Apply.
|
By default, log files are saved in the Server installation folder. |
In the Administrator, connect to the server, then click the Server tab.
In the right pane, click the Server Options tab.
In the Log type list, click Standard or Verbose.
Standard logging captures the following:
user
pass
quit
mkd
stor
ret
dele
abor (for applicable protocols)
Verbose logging captures all client commands and server replies, including the following:
If login fails USER and PASS are logged.
If USER command is logged with code 331 (password required).
If PASS command is logged with the following error codes depending the type of failure:
TOO_MANY_CONNECTIONS_PER_SITE
TOO_MANY_CONNECTIONS_PER_USER
TOO_MANY_CONNECTIONS_PER_IP
ACCOUNT_DISABLED
PROTOCOL_NOT_SUPPORTED
RESTRICTED_IP
PASSWORD_NOT_ACCEPTED
Other error codes:
MAX_LOGIN_EXCEEDED - 421 (temporary problem and client may retry)
MAX_CONNECTTIONS_EXCEEDED - 421
PROTOCOL_NOT_ALLOWED - 530 (permanent problem and client cannot retry)
Connection errors, such as banned IP, are not logged.
To choose how often the log file is rotated
In the Administrator, connect to the server, then click the Server tab.
In the right pane, click the Server Options tab.
Under Log type, click one of the following: Never, Daily, Weekly, or Monthly.
Click Apply.
|
Logs are not written to disk in real-time. As events occur, the server buffers those events in real time and then flushes (writes) them to file once as either a) 60 lines are available, or b) 32kb of log data is received in 1 second or less. |