IronPort Web Security W3C format logs

[harshad_kashikar]

Hi,

I am currently studying different types of logs generated by Cisco IronPort as a part of my project requirement. The log format that I am interested in is W3C. What I have observed is not all the features in the Cisco IronPort Web Security device provides log information in W3C format e.g. SaaS. My questoin is can we configure these features to produce logs inW3C format or it is something that cannot be configured? I am using Async OS version 7.5.

Thanks,

Harshad Kashikar

[Ken Stieers]

7.5 has 3 log styles: Squid, Apache, Squid Details.   W3C is NOT on that list...

If those are missing fields that you need, you can add others to the Custom Fields... the codes are available by clicking on the Custom Fields Reference link.

Taken from my access logs config

[Christian Rahl · Accepted solution]

Many of our logs are not W3C compliant.  Access logs are the primary one that are w3c compliant.  In addition to that you can add your own w3c log and populate it with pre-defined fields.

For the logs in question they are not configurable with w3c.

Christian Rahl

Customer Support Engineer

Cisco Web Content Security Appliance

Cisco Technical Assistance Center RTP

[harshad_kashikar]

Thanks Christian, that helps.