Cisco Cisco Web Security Appliance S690 Mode D'Emploi
24-37
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 24 Logging
Including HTTP/HTTPS Headers in Log Files
Figure 24-5
Configuring Custom Log Fields in the W3C Logs
Enter the custom fields to add in the Custom Fields text box in the Log Fields section. You can enter
multiple custom fields in the Custom Fields text box and add them simultaneously as long as each entry
is separated by a new line (click Enter) before clicking Add.
multiple custom fields in the Custom Fields text box and add them simultaneously as long as each entry
is separated by a new line (click Enter) before clicking Add.
Note
You can create a custom field for any header in a client request or a server response. For more
information, see
information, see
Including HTTP/HTTPS Headers in Log Files
If the list of predefined access log and W3C log fields does not include all header information you want
to log from HTTP/HTTPS transactions, you can type a user defined log field in the Custom Fields text
box when you configure the access and W3C log subscriptions.
to log from HTTP/HTTPS transactions, you can type a user defined log field in the Custom Fields text
box when you configure the access and W3C log subscriptions.
Custom log fields can be any data from any header sent from the client or the server. If a request or
response does not include the header added to the log subscription, the log file includes a hyphen as the
log field value.
response does not include the header added to the log subscription, the log file includes a hyphen as the
log field value.
defines the syntax to use for access and W3C logs.
For example, if you want to log the If-Modified-Since header value in client requests, enter the following
text in the Custom Fields box for a W3C log subscription:
text in the Custom Fields box for a W3C log subscription:
cs(If-Modified-Since)
Table 24-12
Configuring HTTP/HTTPS Headers in Log Files
Header Type
Access Log Format
Specifier Syntax
Specifier Syntax
W3C Log Custom Field Syntax
Header from the client application
%<ClientHeaderName:
cs(ClientHeaderName)
Header from the server
%<ServerHeaderName: sc(ServerHeaderName)