Product guide

B
Fixed-field log formats
McAfee
Content Security Reporter supports some fixed-field log formats that do not require any
header changes. Content Security Reporter correctly parses the data from these log files without any
modifications.
The following table provides information about supported log file formats that are not
automatic-discover in Content Security Reporter. This table includes examples of the expected header
information found in the corresponding log file format.
Any deviation from the expected field format can result in inaccurate reports.
Table B-1 Non-automatic-discover log file formats
Log file type Expected formats Examples
Blue Coat SG -
SmartR
eporter
Format
"[dd/mm/yyyy:hh:mm:ss
timezone]" "computer-name"
client-ip url action "cat match list"
username bytes
"[15/05/2001:15:08:34 GMT]" "FunZone-77"
10.1.1.19 http://www.google.com/ OBSERVED
"Search Engines" - 909
McAfee SaaS
Web Protection
Service
"user_id", "username",
"source_ip", "http_action",
"server_to_client_bytes",
"client_to_server_bytes",
"requested_host",
"requested_path", "result",
"virus",
"request_timestamp_epoch",
"request_timestamp_formatted",
"uri_scheme", "category"
"47877615", "[e-mail]",
"172.22.65.200", "GET", "664", "2837",
"www.myspace.com", "/", "DENIED", "",
"1319501356", "2011-10-24 18:09:16-06",
"http", "Social Networking"
McAfee Web
Security
Format
tv_sec.(tv_usec/1000)
cache_msec client_ip cache_code/
http_code cache_size method_str
url user hier_code/hier_host
content_type sf_action "sf_cats"
1085754420.626 1 172.17.68.177 TCP_DENIED/
403 0 GET http://www.msn.com/ sjones ONE/- -
DENY "Portal Sites"
SiteAdvisor
®
Enterprise
Softw
are
Format
DetectedUTC EventTypeID
CategoriesShortName URL
ActionID RatingID ReasonId
AgentGUID User MachineName
PhishingFacet DownloadsFacet
SpamFacet PopupsFacet
BadlinkerFacet ExploitFacet IP
MIMEType
2009-01-01T14:31:12 18600 rb http://www.
0d6b214a-aafe-42e9-a150-c237c86cd959.com/
a9cf15e0-c151-408a-a8b2-fb31debd8e7c.html 1
1 9 ef4a3a5b-773b-467f-af1f-f1ddb0f5ba31 sara
machine1 6 3 6 6 1 6 192.168.0.1 text/html
McAfee Content Security Reporter 1.0.0 Software Product Guide
67