Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm logging both web proxy and firewall traffic under the logging tab.

How would I get a top 50 list of websites that use the most traffic. I need the website addresses, not just the IP address as an IP address would be hosting several different sites.

share|improve this question

closed as not a real question by Shane Madden, John Gardeniers, Ward, MDMarra, voretaq7 Jul 18 '12 at 21:50

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

You must specify what kind of proxy and firewall you are using. – Can Kavaklıoğlu Dec 21 '11 at 20:52
ISA 2006 proxy and firewall, just using this logging -> – Syntax Dec 21 '11 at 21:41
That's not a useful screenshot. For anyone not following the link, it's a picture of two links saying "Firewall log settings" and "Web Proxy log settings" – TristanK Dec 22 '11 at 2:33
That was just to show the logging method I am using. – Syntax Dec 22 '11 at 3:03
up vote 2 down vote accepted

If you're logging in W3C format in a text file then you can run AWStats or similar over it.

From Technet:

Text File Logging

You can save ISA Server logs to a text file, in one of the following formats:

World Wide Web Consortium (W3C) format. W3C logs contain both data and directives, describing the version, date, and logged fields. Because the fields are described in the file, unselected fields are not logged. The tab character is used as a delimiter. Date and time are in Coordinated Universal Time (UTC).

ISA Server format. ISA Server format contains only data with no directives. All fields are always logged. Unselected fields are logged with a dash, to indicate that they are empty. The comma character is used as a delimiter. The date and time fields are in local time as configured on the computer.

By default, log files are saved in the %ProgramFiles%\Microsoft ISA Server\ISALogs folder.

share|improve this answer
Or LogParser 2.2 from – TristanK Dec 22 '11 at 2:34

Not the answer you're looking for? Browse other questions tagged or ask your own question.