I am running webalizer (on Fedora Linux platform) using logs from an ezproxy proxy server.  It is ezproxy's job to ask for authentication for remote library patrons and verify their credentials match up with our database.  If they do, they will proxy the session.  If not, it will drop the session.

I have ezproxy configured to record only the starting point URL's (the links to the online databases).  Every time a link is clicked on, an entry is put in the log file.

Here is an example of the ezproxy logs that I use to generate the webalizer html file:

local 66.158.45.2 - - [15/Jul/2008:18:56:44 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defaultdb=f5h HTTP/1.1" 301 585
local 66.158.45.2 - - [15/Jul/2008:18:56:45 -0600] "HEAD http://proxy-ob.dupagels.lib.il.us:18457/login?url=http://infoweb.newsbank.com?db=CTRB HTTP/1.1" 301 593
local 66.158.45.2 - - [15/Jul/2008:18:56:45 -0600] "HEAD http://heritagequestonline.com/refurl HTTP/1.1" 301 495
local 66.158.45.2 - - [15/Jul/2008:18:56:45 -0600] "HEAD http://infoweb.newsbank.com?db=OBIT HTTP/1.1" 301 491
local 66.158.45.2 - - [15/Jul/2008:18:56:46 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=srck5 HTTP/1.1" 301 557
local 66.158.45.2 - - [15/Jul/2008:18:56:46 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=src HTTP/1.1" 301 553
local 66.158.45.2 - - [15/Jul/2008:18:56:46 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defaultdb=bwh HTTP/1.1" 301 585
local 66.158.45.2 - - [15/Jul/2008:18:56:47 -0600] "HEAD http://proquest.umi.com/login?COPT=REJTPTNiMDQmSU5UPTAmVkVSPTI=&clientId=209083 HTTP/1.1" 301 579
local 66.158.45.2 - - [15/Jul/2008:18:56:47 -0600] "HEAD http://infotrac.galegroup.com/itweb/oakb72066?db=GVRL HTTP/1.1" 301 527
local 66.158.45.2 - - [15/Jul/2008:18:56:47 -0600] "HEAD http://researcher.sirs.com HTTP/1.1" 301 473
local 66.158.45.2 - - [15/Jul/2008:18:56:49 -0600] "HEAD http://firstsearch.oclc.org/FSIP HTTP/1.1" 301 485
local 66.158.45.2 - - [15/Jul/2008:18:56:50 -0600] "HEAD http://proxy-ob.dupagels.lib.il.us:18457/login?url=http://infoweb.newsbank.com?db=DOBB HTTP/1.1" 301 593
local 66.158.45.2 - - [15/Jul/2008:18:56:50 -0600] "HEAD http://www.netlibrary.com/ HTTP/1.1" 301 473
local 66.158.45.2 - - [15/Jul/2008:18:56:51 -0600] "HEAD http://go.grolier.com/ HTTP/1.1" 301 465
local 66.158.45.2 - - [15/Jul/2008:18:56:54 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defaultdb=buh HTTP/1.1" 301 585
local 66.158.45.2 - - [15/Jul/2008:18:56:54 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=sas HTTP/1.1" 301 553
local 66.158.45.2 - - [15/Jul/2008:18:56:56 -0600] "HEAD http://www.referenceusa.com HTTP/1.1" 301 475
local 66.158.45.2 - - [15/Jul/2008:18:56:59 -0600] "HEAD http://library.public-record.com/?src=OakBrook HTTP/1.1" 301 513
local 66.158.45.2 - - [15/Jul/2008:18:57:03 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defaultdb=hch HTTP/1.1" 301 585
local 66.158.45.2 - - [15/Jul/2008:18:57:04 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=novelistk8 HTTP/1.1" 301 567
local 66.158.45.2 - - [15/Jul/2008:18:57:05 -0600] "HEAD http://proquest.umi.com/login HTTP/1.1" 301 479
local 66.158.45.2 - - [15/Jul/2008:18:57:36 -0600] "HEAD http://infoweb.newsbank.com?db=DOBB HTTP/1.1" 301 491
local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD http://infoweb.newsbank.com?db=CTRB HTTP/1.1" 301 491
local 66.158.45.2 - - [15/Jul/2008:18:57:38 -0600] "HEAD http://search.ebscohost.com/login.aspx?authtype=ip,uid&profile=ehost&defaultdb=aph HTTP/1.1" 301 585
proxy 205.188.116.15 - gNDs4AexHJMk3B9 [15/Jul/2008:21:04:33 -0600] "GET http://proxy-ob.dupagels.lib.il.us:18457/login?url=http://infoweb.newsbank.com?db=CTRB HTTP/1.1" 200 0
proxy 205.188.116.205 - gNDs4AexHJMk3B9 [15/Jul/2008:21:04:33 -0600] "GET http://infoweb.newsbank.com?db=CTRB HTTP/1.1" 200 0
76.224.8.224 proxy  - eJuY424kpSUJqee [16/Jul/2008:11:47:38 -0600] "GET http://heritagequestonline.com/refurl HTTP/1.1" 200 0

As you can see, there are at least 20 entries on this page.  In total, there are 56 entries in the log file, and this IS reflected in the webalizer page.  However, there are only 3 URL's listed in the section "TOP URL's" section of the table.  As you can see, there are more than 3 URL's on this page alone. 

I've read and re-read the README file and I don't know what is causing only 3 URL's to show.

My settings in the webalizer.conf file are:

Top URL's   (default of 30)

What would cause only three URL's to show when I have more than 50 log entries / Hits in the log file?