Cisco Cisco Web Security Appliance S680 Guía Del Usuario
24-39
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
Chapter 24 Logging
W3C Compliant Access Logs
#Software: AsyncOS for Web 6.3.0
#Fields: timestamp x-elapsed-time c-ip x-resultcode-httpstatus
sc-bytes cs-method cs-url cs-username x-hierarchy-origin cs-mime-type
x-acltag x-result-code x-suspect-user-agent
Working with Log Fields in W3C Access Logs
When defining a W3C access log subscription, you must choose which log fields
to include, such as the ACL decision tag or the client IP address. You can include
one of the following types of log fields:
to include, such as the ACL decision tag or the client IP address. You can include
one of the following types of log fields:
•
Predefined. The web interface includes a list of fields from which you can
choose. For more information, see
choose. For more information, see
•
User defined. You can type a log field that is not included in the predefined
list. For more information, see
list. For more information, see
Most W3C log field names include a prefix that identifies from which header a
value comes, such as the client or server. Log fields without a prefix reference
values that are independent of the computers involved in the transaction.
value comes, such as the client or server. Log fields without a prefix reference
values that are independent of the computers involved in the transaction.
describes the W3C log fields prefixes.
For example, the W3C log field “cs-method” refers to the method in the request
sent by the client to the server, and “c-ip” refers to the client’s IP address.
sent by the client to the server, and “c-ip” refers to the client’s IP address.
Table 24-10
W3C Log Field Prefixes
Prefix Header
Description
c
Client
s
Server
cs
Client to server
sc
Server to client
x
Application specific identifier.