Before taking down an application for upgrade or maintenance we like to check which (if any) users are currently active (ie: have explicitly accessed a page).
Is there some way to report this (ideally with an SQL query), other than grepping the access log using something like:
fgrep -v -e '"GET /rest/' localhost_access_log.2012-12-06.txt | tail