Cisco Cisco Web Security Appliance S160 Betriebsanweisung
20-27
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
Chapter 20 Monitor System Activity Through Logs
Customizing Access Logs
Customizing Access Logs
You can customize regular and W3C access logs to include many different fields to capture
comprehensive information about web traffic within the network using predefined fields or user defined
fields.
comprehensive information about web traffic within the network using predefined fields or user defined
fields.
Related Topics
•
For a list of predefined fields, see
•
For information on user defined fields, see
.
Access Log User Defined Fields
If the list of predefined Access log and W3C log fields does not include all header information you want
to log from HTTP/HTTPS transactions, you can type a user defined log field in the Custom Fields text
box when you configure the access and W3C log subscriptions.
to log from HTTP/HTTPS transactions, you can type a user defined log field in the Custom Fields text
box when you configure the access and W3C log subscriptions.
Custom log fields can be any data from any header sent from the client or the server. If a request or
response does not include the header added to the log subscription, the log file includes a hyphen as the
log field value.
response does not include the header added to the log subscription, the log file includes a hyphen as the
log field value.
The following table defines the syntax to use for access and W3C logs:
For example, if you want to log the If-Modified-Since header value in client requests, enter the following
text in the Custom Fields box for a W3C log subscription:
text in the Custom Fields box for a W3C log subscription:
cs(If-Modified-Since)
Related Topics
•
.
•
.
Customizing Regular Access Logs
Step 1
Choose System Administration > Log Subscriptions.
Step 2
Click the access log file name to edit the access log subscription.
Step 3
Enter the required format specifiers in the Custom Field.
The syntax for entering format specifiers in the Custom Field is as follows:
<format_specifier_1> <format_specifier_2> ...
For example:
%a %b %E
You can add tokens before the format specifiers to display descriptive text in the access log file. For
example:
example:
Header Type
Access Log Format
Specifier Syntax
Specifier Syntax
W3C Log Custom Field Syntax
Header from the client application
%<ClientHeaderName:
cs(ClientHeaderName)
Header from the server
%<ServerHeaderName: sc(ServerHeaderName)