$Id: README.merging-log-files,v 1.1 2009/01/26 09:06:11 vanbaal Exp $

Since version 2.0.3.99.1, Lire offers support for merging log files.

Lire can merge logging data from Apache and IIS servers into one
extended Common Log Format (aka combined format), as commonly used by
Apache.  The resulting log file can be fed back to Lire for reporting,
or can be used as input for another log file analysis tool.

Here's a complete example on how to use it.  Assumed is you're not
using an RPM or .deb package for Lire, but you're installing Lire from
.tar.gz.


Install Lire
------------

 $ tar zxf lire-*.tar.gz
 $ cd lire-*
 $ ./configure
 $ make
 $ sudo make install

Set up work environment
-----------------------

 $ mkdir work
 $ export PATH=$PATH:/usr/local/libexec/lire/www

(If your /tmp is limited in size, while your homedirectory has lots
of space:

 $ export TMPDIR=$HOME/tmp

)

Prepare logs for merging
------------------------

If /path/to/iis/log/store/ holds files like ex081102.zip, ex081104.zip
and ex081106.zip, while /path/to/apache/log/store/ holds files like
www2_apache_weeklog.gz, and if each ex*.zip file holds exactly one log
file in the W3C Extended Log Format, as used by Microsoft's Internet
Information Services:

 $ cp /path/to/iis/log/store/*.zip ~/work/
 $ cp /path/to/apache/log/store/*.gz ~/work/

Execute the merge
-----------------

 $ cd ~/work
 $ merge2combined >~/apache-combined.log

(If you'd rather not use lots of diskspace, run merge2combined as:

 $ merge2combined | gzip -c >~/apache-combined.log.gz

)

Prepare work directory for next merge by cleaning it up:

 $ rm ~/work/*

More information
----------------

Run

 $ merge2combined --help

for more information.