Urchin hasn't been updated since 2012.
If you're ready to replace Urchin,
Check out Angelfish Software

Urchin Support Plans

Configuring Log Sources in Urchin 6

To create a new log source, first navigate to the log source list by clicking Configuration in the top-right part of the screen. Next, on the left menu, choose Urchin Profiles >> Log Manager. On this screen, you'll see an add button.

After clicking on that button, Urchin will prompt you with a log source setup wizard. From the first screen, select whether the log source will be local (available on the Urchin server) or remote (accessed via FTP, UNC, HTTP, or HTTPS).

Local Log Source
When creating a local log source, first browse to the directory or full path of the local log file(s) (date substitution may be used. See section below for more information). Next, select the account, if any, to apply this log source to. Then, enter a name for this log source. After clicking Next, choose the Log Format for the specified log file(s) (see below for descriptions).

Remote Log Source
Depending on the remote source (FTP, UNC, HTTP, or HTTPS), you will be prompted to enter the appropriate server and credential information. After continuing through the wizard, you will then be prompted to enter the directory or full path of the log file(s), the local destination for the file(s), the account to apply the new log source to, and a name. Finally, in the last step you will be asked to choose the Log Format for the specified log file(s). For most IIS and Apache logs, 'auto' works just fine.

Applying Log Sources to Profiles
Navigate to Configuration>>Urchin Profiles>>Profiles and select click the Edit icon next to the appropriate Profile. Then, choose the "Log Sources" tab. Select whichever log sources you would like to apply to this profile (using ctrl or shift to select multiple items) and click the right arrow to move them over. Click "Update" to save the changes.

Date Substitution
Using date substitution tells Urchin to only process log files that match the specified date or date range. For example, since IIS logs are almost always saved as 'ex090217.log', you may use exYYMMDD* to only process the logs from the day before. Or, exYYMM* to process all logs from the current month. Here is a list of the most commonly used date substitution symbols.

* - matches anything wherever the asterisk is place
YYYY or %Y - four digit date (e.g. 2009)
YY - two digit date (e.g. 09)
MM or %m - two digit month (e.g. 02)
DD or %d - two digit day of month (01-31)
%e - day of month for single digit dates (1-31)
%H - the two-digit hour of the day (00-23)