Hi,
I know that the two logs are not the same, I find it curious that processing time would be output in two different formats. We are not using late binding.
An example from the syslog is copied below
Jan 6 09:40:38 (server ip) usage: (request ip) - - [06/Jan/2015:09:38:57 -1200] "GET /search?q=google+search&site=default_collection&client=waikato&
output=xml_no_dtd&proxystylesheet=waikato&ie=UTF-8&ulang&ip=(request ip)&access=p&sort=date:D:L:d1&entqr=3&entqrm=0&entsp=a__waikato&wc=200&wc_mc=1&oe=UTF-8&ud=1 HTTP/1.1" 200 9887 1000 146.00
As you can see the search is searching on public content.
Running this same search manually returns results in 0.15s
Georgina.