Example; Welf (Webtrends Enhanced Log Format) - HP P4535A - Web Cache Server Appliance Administrator's Manual

Appendix D

Example

The following is an example of a
<LogFormat>
<Name = "minimal"/>
<Format = "%<chi> : %<cqu> : %<pssc>"/>
</LogFormat>
The following is an example of a
<LogFormat>
<Name = "summary"/>
<Format = "%<LAST(cqts)> : %<COUNT(*)> : %<SUM(psql)>"/>
<Interval = "10"/>
</LogFormat>
The following is an example of a
<LogFilter>
<Name = "only_refresh_hits"/>
<Action = "ACCEPT"/>
<Condition = "%<pssc> MATCH REFRESH_HIT"/>
</LogFilter>
NOTE
The following is an example of a
defined earlier. The log file name will be
<LogObject>
<Format = "minimal"/>
<Filename = "minimal"/>
</LogObject>
The following is an example of a
in the domain
company.com
4000 of the collation host
<LogObject>
<Format = "minimal"/>
<Filename = "minimal"/>
<ServerHosts = "company.com,server.somewhere.com"/>
<Protocols = "http"/>
<CollationHosts = "logs.company.com:4000,209.131.52.129:5000"/>
</LogObject>

WELF (WebTrends Enhanced Log Format)

Traffic Server supports WELF, the WebTrends Enhanced Log format, so that you can analyze Traffic Server
log files with WebTrends reporting tools. A predefined
provided at the end of the
that uses this predefined format.
<LogObject>
specification collecting information using three common fields:
LogFormat
LogFormat
LogFilter
When specifying the field in the filter condition, you can omit the
the following filter is equivalent to the example directly above:
<LogFilter>
<Name = "only_refresh_hits"/>
<Action = "ACCEPT"/>
<Condition = "pssc MATCH REFRESH_HIT"/>
</LogFilter>
specification that creates a local log file for the minimal format
LogObject
minimal.log
specification that includes only HTTP requests served by hosts
LogObject
or by the specific server
logs.company.com
file (shown below). To create a WELF format log file, create a
logs.config
specification using aggregate operators:
that will cause only
REFRESH_HIT
because this is an ASCII log file (the default).
server.somewhere.com
, and to port 5000 of the collation host 209.131.52.129:
that is compatible with WELF is
<LogFormat>
Configuration Files
entries to be logged:
. This means that
%<>
. Log entries are sent to port
175