Cisco Cisco Web Security Appliance S670 User Guide
20-23
Cisco AsyncOS for Web User Guide
Chapter 20 Monitor System Activity Through Logs
Log File Fields and Tags
Related Topics
•
.
•
.
Log File Fields and Tags
•
•
•
•
Access and W3C Log File Fields
Log files use variables to represent the individual items of information that make up each log file entry.
These variables are called format specifiers in Access logs and log fields in W3C logs and each format
specifier has a corresponding log field.
These variables are called format specifiers in Access logs and log fields in W3C logs and each format
specifier has a corresponding log field.
The following table describes these variables:
Webcat Integration
Framework Logs
Framework Logs
Records messages related to communication
between the Web Proxy and the URL filtering
engine associated with Cisco Web Usage Controls.
between the Web Proxy and the URL filtering
engine associated with Cisco Web Usage Controls.
No
No
Webroot Integration
Framework Logs
Framework Logs
Records messages related to communication
between the Web Proxy and the Webroot scanning
engine.
between the Web Proxy and the Webroot scanning
engine.
No
No
Webroot Logs
Records the status of anti-malware scanning
activity from the Webroot scanning engine.
activity from the Webroot scanning engine.
Yes
Yes
Welcome Page
Acknowledgement
Logs
Acknowledgement
Logs
Records a history of web clients who click the
Accept button on the end-user acknowledgement
page.
Accept button on the end-user acknowledgement
page.
Yes
Yes
Log File Type
Description
Supports
Syslog Push?
Syslog Push?
Enabled by
Default?
Default?
Format Specifier in
Access Logs
Access Logs
Log Field in W3C Logs
Description
%:<1
x-p2s-first-byte-time
The time it takes from the moment the Web
Proxy starts connecting to the server to the
time it is first able to write to the server. If the
Web Proxy has to connect to several servers
to complete the transaction, it is the sum of
those times.
Proxy starts connecting to the server to the
time it is first able to write to the server. If the
Web Proxy has to connect to several servers
to complete the transaction, it is the sum of
those times.
%:<a
x-p2p-auth-wait-time
Wait-time to receive the response from the
Web Proxy authentication process, after the
Web Proxy sent the request.
Web Proxy authentication process, after the
Web Proxy sent the request.