I use IIS and Integrated Authentication. Therefore I can use
ColdFusion's built-in CGI variables to tell me who the currently
logged in user is (notice I did not say "who is behind the
keyboard"). With this information I log the date, time, and other
pertinent information of literally every page hit on my intranet.
This also doubles as my hit counter, for no other reason than the
fact that management loves to know how many "hits" we are getting.
It may appear to be resource intensive and over-the-top, but
much of my information is patient medical records, and there is a
requirement in place to log just about everything.
So, like Dan said, create a new table (mine is called
tblHits) and have at it.
I use the Application.cfm page to determine if the visitor is
in my permissions table with the right to view the current
directory, since my web site directories are strategically set up
according to department. I look up that information in my
usertable. If the answer is no, the user is CFLOCATION'd away to
the Access Request Page.
I use the OnRequestEnd template to log the username, the
visited page, the referring page, the IP address, the current date
and time, etc. In our case, everything patient related revolves
around the patient's client number, so if the client number is
defined on any given page I log that too. Sooo, if I want to know
who accessed client number 5348's information over the last month
it is a straighforward query.
There are more modern ways to achieve this with
Application.cfc, etc, but my way flat out works for us, and
probably will not be changed until our needs change.