User Guide

CUSTOM FORMATTING IN ACCESS LOGS AND W3C LOGS
CHAPTER 20: LOGGING 451
cs-username %A Authenticated user name. This field is
written with double-quotes in the access
logs.
cs-version %P Protocol, including the version number
when applicable
date %v Date in YYYY-MM-DD
DCF %j Do not cache response code; DCF flags
sc(Server) %>Server: Server header in the response
sc-body-size %s Bytes sent to the client from the Web Proxy
for the body content.
sc-bytes %b Response body size
sc-http-status %h HTTP response code
s-computerName %N Server name or destination host name. This
field is written with double-quotes in the
access logs.
sc-result-code %w Result code
For example: TCP_MISS, TCP_HIT
sc-result-code-denial %W Result code denial
s-hierarchy %H Hierarchy retrieval
s-hostname %d Data source or server IP address
s-ip %k Data source IP address (server IP address)
s-port %p Destination port number
time %V Time in HH:MM:SS
timestamp %t Timestamp in UNIX epoch
Note: If you want to use a third party log
analyzer tool to read and parse the W3C
access logs, you might need to include the
“timestamp” field. Most log analyzers only
understand time in the format provided by
this field.
Table 20-11 Log Fields in W3C Logs and Format Specifiers in Access Logs (Continued)
W3C Log Field Format Specifier
in Access Logs
Description