Nihuo Web Log Analyzer Predefined Filters

Sub-directory 'filter' contains a collection of predefined Nihuo Web Log Analyzer filters to help you include or exclude specific hits or visitors in the web site traffic reports.

Filter file is a xml style text file. You can edit filter file or create it with any text editor. You can also download Nihuo Web Log Analyzer for
Windows version to generate the filter file in GUI mode.

Hit filter's file extension is hfml. Visit filter's files extension is vfml.

Hit Filter

Hit filters include or exclude raw data generated by individual actions on a web site. The specifying ranges or types of data let you limit the log data that is analyzed, letting you focus on relevant activity.

The choices available are:

Name	Type ID	Description
Agent	17	Specify agent sub string that you want to filter.
Authenticate User	8	Specify the name of authenticate users that you want to filter.
Browser	15	Filter activity based on the browser used by visitor.
Client Host Country	11	Filter visitors coming from specified country. Please click here for country id information.
Client Host Domain	12	Filter visitors coming from specific domains, subnets, or IP addresses
Client Host IP	10	Filter visitors based upon IP range of the visitor.
Cookie	18	Specify cookie that you want to filter.
Day Of Week	10	Specify the day of week that you want to filter.
File Type	25	Specify file type that you want to filter.
Method	5	Filter the HTTP methods from the reports. You can see a complete list of HTTP methods here: http://www.w3.org/Protocols/rfc2616/rfc2616.txt
OS	14	Filter activity based on the OS used by visitor.
Referrer	3	Filter visitors who come from specified referrers.
Requested File	0	Specify the file that you want to filter.
Return Code	1	Specify the types of results you want to filter.
Spider	16	Filter specified spider.
Stolen Object	19	Filter activities caused by stolen objects
Time	7	Specify the time of day that you want to filter.
URL Parameter	2	Specify the dynamic page that you want to filter.
Virtual Domain	13	Filter virtual domain from the reports.

Visit filter

Visit filters include or exclude all the data in a visitor session. The specifying ranges or types of data let you limit the log data that is analyzed, letting you focus on relevant activity.

The choices available are:

Name	Type ID	Description
Visitor with specified entry page	4	Filter visitors based upon entry page of the visitor
Visitors with specified exit page	20	Filter visitors based upon exit page of the visitor.
Visitors who came from specify referrer	22	Filter visitors who are from specified referrer.
Visitors who accessed specified file	21	Filter visitors who have accessed specified file.
Visitors who accessed specified file type	24	Filter visitors who have accessed specified file type.
Visit Depth	23	Specify visit depth which you want filter.
Visitors who came from specify search phrase	25	Filter visitors who are from specified search phrase.

Usage

./nwla -f=logfile --hitfilter=[hit filter file] --visitfilter=[visit filter file]

Multiple filters can be combined with boolean operator ( AND, OR , NOT ) in a filter file. Hit filter just can be combined with other hit filter, visit filter just can be combined with other visit vilter. Different type filter can not be combined.

Filter combination demo

Bleow is a hit filter combination demo.

<hitsfilter>

[filter1]

<and>

[filter2]

<or>

[filter3]

</or>

</and>

<or>

[filter4]

</or>

</hitfilter]

Equal ( ( filter1 and ( filter 2 or filter 3 ) ) or filter 4 )

Predefined filter files

File Name	Description
africa.hfml	Just analyze hits coming from Africa. Activities caused by spiders and stolenobject are excluded.
agent.hfml	Exclude hits which are not include "Mizilla" in agent string.
asia.hfml	Just analyze hits coming from Asia. Activities caused by spiders and stolenobject are excluded.
australia.hfml	Just analyze hits coming from Australia. Activities caused by spiders and stolenobject are excluded.
authusr.hfml	Just analyze activities caused by authenticated user "admin".
canada.hfml	Just analyze hits coming from Canada. Activities caused by spiders and stolenobject are excluded.
centralamerica.hfml	Just analyze hits coming from Central America. Activities caused by spiders and stolenobject are excluded.
china.hfml	Just analyze hits coming from China. Activities caused by spiders and stolenobject are excluded.
e_cookie.hfml	Exclude hits which are not include "usrid=" in cookie string.
e_error.hfml	Exclude all activities which status is error. ( status code is 4* or 5* )
e_invalidactivity.hfml	Exclude all activities which status is error ( status code is 4* or 5* ). Activities caused by spiders and stolenobject are excluded also.
e_localip.hfml	Exclude all activities caused by local IP.
e_spider.hfml	Exclude activities caused by spiders.
e_stolenobj.hfml	Activities caused by stolenobject are excluded.
easteuro.hfml	Just analyze hits coming from East Euro. Activities caused by spiders and stolenobject are excluded.
entrypage.vfml	Filter user sessions which the user viewed first page is "/purchase.php"
exitpage.vfml	Filter user sessions which the user viewed last page is "/purchase.html"
file.hfml	Just analyze activities in directory /downloads/.
file.vfml	Filter user sessions which the user has viewed page "/purchase.asp"
filetype.vfml	Filter user sessions which the user has viewed Video file type.
firefox.hfml	Just analyze activities caused by Firefox browser.
france.hfml	Just analyze hits coming from France. Activities caused by spiders and stolenobject are excluded.
germany.hfml	Just analyze hits coming from Germany. Activities caused by spiders and stolenobject are excluded.
googlespider.hfml	Just analyze activities caused google spider.
japan.hfml	Just analyze hits coming from Japan. Activities caused by spiders and stolenobject are excluded.
linux.hfml	Just analyze hits from OS Linux.
microsoft.hfml	Track visits only from Microsoft.
msnspider.hfml	Just analyze hits caused by MSN spdiers.
northamerica.hfml	Just analyze hits coming from North America. Activities caused by spiders and stolenobject are excluded.
oceania.hfml	Just analyze hits coming from Oceania. Activities caused by spiders and stolenobject are excluded.
post.hfml	Filter your reports by searching your log file for "POST" HTTP methods.
referrer.vfml	Filter user sessions which the user come from referrer "*.googlesysndication.com".
searchphrase.vfml	Filter visitors who came from specify search phrase : "nihuo"
southamerica.hfml	Just analyze hits coming from South America. Activities caused by spiders and stolenobject are excluded.
statuscode.hfml	Filter your reports by searching your log file for "20*" HTTP status code.
sweden.hfml	Just analyze hits coming from Sweden. Activities caused by spiders and stolenobject are excluded.
uk.hfml	Just analyze hits coming from United Kingdom. Activities caused by spiders and stolenobject are excluded.
urlparam.hfml	Just analyze hits that url parameter is "page=17*".
us.hfml	Just analyze hits coming from United States. Activities caused by spiders and stolenobject are excluded.
video.hfml	Just analyze activities which access video files
visitdepth.vfml	Filter user sessions which the user has more than 2 pageviews ( visit depth equal or larger than 2 ).
weekend.hfml	Just analyze activities happend in weekend (sunday and satuday).
westeuro.hfml	Just analyze hits coming from West Europe. Activities caused by spiders and stolenobject are excluded.
workinghour.hfml	Just analyze activities happend in working time (9:00AM - 5:00PM) .
yahoo.hfml	Just analyze hits which referrer match "*.yahoo.com".
yahoospider.hfml	Just analyze activities caused google spider.

If you have any questions about filters and our products, please contact us at [email protected], we wil feedback ASAP.