I can tell you how to do it using SiteAdmin:
From the Dashboard, click on the “+” next to “Stats & Logs” in the left-hand column. This will expand and show show these choices below:
AWStats
Latest Visitors
Raw Access Logs
Error Logs
Click on “Raw Access Logs” The right-hand side of the page will display options and settings for the raw logs.
Under the heading “Configure Logs,” if they aren’t already clicked, check off
—Archive logs in your home directory at the end of each stats run
—Remove previous month’s archived logs from your home directory at the end of the month
and then press the “Save Settings” button.
If this hasn’t already been done (it may be already set to this by default; I don’t recall), after 24 hours, under the heading on this page “Archived Raw Logs” you’ll see a file with a name of the form
(your domain)-MON-YYYY.gz
where (your domain) is your domain name, MON is the standard 3 letter abbreviation for the current month, YYYY is the current year as a 4 digit number, and ‘.gz’ is literal text.
These are links to download the raw log in compressed form. When you download the file and uncompress it, you’ll have a list of *every* request made to (your domain) via HTTP, with the IP address of the requesting machine the first thing on each line. For example, say you have a page called (just to make the example easier) page.html that contains a references to a stylesheet and four images. This will generate 6 lines in the raw log: one for page.html, one for the stylesheet, and one for each of the four images.
There is more information on each line that just the IP number and file requested, but there should be everything you need—for example, referring pages are listed, so you’d see a search engine query.
I hope this helps,
smg
