Cisco Cisco Web Security Appliance S170 Guía Del Usuario
24-39
Cisco IronPort AsyncOS 7.1 for Web User Guide
OL-23207-01
Chapter 24 Logging
Custom Formatting in Access Logs and W3C Logs
Custom Formatting in Access Logs and W3C Logs
You can customize access logs and W3C access logs to include many different
fields to capture comprehensive information about web traffic within the network.
Access logs use format specifiers, and the W3C access logs use W3C log fields.
fields to capture comprehensive information about web traffic within the network.
Access logs use format specifiers, and the W3C access logs use W3C log fields.
describes the W3C log fields you can include in the W3C access logs
and the custom format specifiers (for the access logs) they correspond with.
Table 24-11
Log Fields in W3C Logs and Format Specifiers in Access Logs
W3C Log Field
Format Specifier in
Access Logs
Access Logs
Description
bytes
%B
Total bytes used (request size + response
size, which is %q + %s)
size, which is %q + %s)
c-ip
%a
Client IP Address
c-port
%F
Client source port
CMF
%M
Cache miss flags, CMF flags
cs(Cookie)
%C
Cookie header. This field is written with
double-quotes in the access logs.
double-quotes in the access logs.
cs(Referer)
%<Referrer:
Referrer
cs(User-Agent)
%u
User agent. This field is written with
double-quotes in the access logs.
double-quotes in the access logs.
cs(X-Forwarded-For)
%f
X-Forwarded-For header
cs-auth-group
%g
Authorized group names. This field is written
with double-quotes in the access logs.
with double-quotes in the access logs.