Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 606
 
24-28
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 24      Logging
Custom Formatting in Access Logs and W3C Logs
Custom Formatting in Access Logs and W3C Logs
You can customize access logs and W3C access logs to include many different fields to capture 
comprehensive information about web traffic within the network. Access logs use format specifiers, and 
the W3C access logs use W3C log fields. 
 describes the W3C log fields you can include in the W3C access logs and the custom format 
specifiers (for the access logs) they correspond with. 
Table 24-11
Log Fields in W3C Logs and Format Specifiers in Access Logs 
W3C Log Field
Format Specifier in 
Access Logs
Description
x-acl-added-headers
%XP
Unrecognized header. Use this field to log 
extra headers in client requests. This supports 
troubleshooting of specialized systems that 
add headers to client requests as a way of 
authenticating and redirecting those requests, 
for example, YouTube for Schools.
bytes
%B
Total bytes used (request size + response 
size, which is %q + %s)
c-ip
%a
Client IP Address
c-port
%F
Client source port
CMF
%M
Cache miss flags, CMF flags
cs(Cookie)
%C
Cookie header. This field is written with 
double-quotes in the access logs.
cs(Referer)
%<Referer:
Referer
cs(User-Agent)
%u
User agent. This field is written with 
double-quotes in the access logs.
cs(X-Forwarded-For)
%f
X-Forwarded-For header
cs-auth-group
%g
Authorized group names. This field is written 
with double-quotes in the access logs.