Cisco Cisco Web Security Appliance S160 Guía Del Usuario
24-28
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 24 Logging
Custom Formatting in Access Logs and W3C Logs
Custom Formatting in Access Logs and W3C Logs
You can customize access logs and W3C access logs to include many different fields to capture
comprehensive information about web traffic within the network. Access logs use format specifiers, and
the W3C access logs use W3C log fields.
comprehensive information about web traffic within the network. Access logs use format specifiers, and
the W3C access logs use W3C log fields.
describes the W3C log fields you can include in the W3C access logs and the custom format
specifiers (for the access logs) they correspond with.
Table 24-11
Log Fields in W3C Logs and Format Specifiers in Access Logs
W3C Log Field
Format Specifier in
Access Logs
Access Logs
Description
x-acl-added-headers
%XP
Unrecognized header. Use this field to log
extra headers in client requests. This supports
troubleshooting of specialized systems that
add headers to client requests as a way of
authenticating and redirecting those requests,
for example, YouTube for Schools.
extra headers in client requests. This supports
troubleshooting of specialized systems that
add headers to client requests as a way of
authenticating and redirecting those requests,
for example, YouTube for Schools.
bytes
%B
Total bytes used (request size + response
size, which is %q + %s)
size, which is %q + %s)
c-ip
%a
Client IP Address
c-port
%F
Client source port
CMF
%M
Cache miss flags, CMF flags
cs(Cookie)
%C
Cookie header. This field is written with
double-quotes in the access logs.
double-quotes in the access logs.
cs(Referer)
%<Referer:
Referer
cs(User-Agent)
%u
User agent. This field is written with
double-quotes in the access logs.
double-quotes in the access logs.
cs(X-Forwarded-For)
%f
X-Forwarded-For header
cs-auth-group
%g
Authorized group names. This field is written
with double-quotes in the access logs.
with double-quotes in the access logs.