Cisco Cisco Web Security Appliance S360 Guia Do Utilizador

You can customize access logs and W3C access logs to include many different 
fields to capture comprehensive information about web traffic within the network. 
Access logs use format specifiers, and the W3C access logs use W3C log fields. 

 describes the W3C log fields you can include in the W3C access logs 

and the custom format specifiers (for the access logs) they correspond with. 

bytes

%B

Total bytes used (request size + response 
size, which is %q + %s)

c-ip

%a

Client IP Address

c-port

%F

Client source port

CMF

%M

Cache miss flags, CMF flags

cs(Cookie)

%C

Cookie header. This field is written with 
double-quotes in the access logs.

cs(Referer)

%<Referrer:

Referrer

cs(User-Agent)

%u

User agent. This field is written with 
double-quotes in the access logs.

cs(X-Forwarded-For)

%f

X-Forwarded-For header

cs-auth-group

%g

Authorized group names. This field is written 
with double-quotes in the access logs.