topic IronPort Web Security W3C format logs in Web Security

IronPort Web Security W3C format logs

harshad_kashikar — Thu, 14 Mar 2013 18:07:34 GMT

Hi,

I am currently studying different types of logs generated by Cisco IronPort as a part of my project requirement. The log format that I am interested in is W3C. What I have observed is not all the features in the Cisco IronPort Web Security device provides log information in W3C format e.g. SaaS. My questoin is can we configure these features to produce logs inW3C format or it is something that cannot be configured? I am using Async OS version 7.5.

Thanks,

Harshad Kashikar

IronPort Web Security W3C format logs

Ken Stieers — Thu, 14 Mar 2013 18:13:56 GMT

7.5 has 3 log styles: Squid, Apache, Squid Details. W3C is NOT on that list...

If those are missing fields that you need, you can add others to the Custom Fields... the codes are available by clicking on the Custom Fields Reference link.

Taken from my access logs config

IronPort Web Security W3C format logs

Christian Rahl — Fri, 15 Mar 2013 14:19:21 GMT

Many of our logs are not W3C compliant. Access logs are the primary one that are w3c compliant. In addition to that you can add your own w3c log and populate it with pre-defined fields.

For the logs in question they are not configurable with w3c.

Christian Rahl

Customer Support Engineer

Cisco Web Content Security Appliance

Cisco Technical Assistance Center RTP

IronPort Web Security W3C format logs

harshad_kashikar — Sat, 16 Mar 2013 10:02:53 GMT

Thanks Christian, that helps.