224
Appendix E
Event Logging Formats
Logging format cross reference
The following sections illustrate the correspondence between HP logging fields and standard logging fields
for the Squid and Netscape formats.
Squid logging formats
The following table lists the Squid logging fields and the corresponding HP logging field symbols:
For example, if you want to create a custom format called
short_sq
based on the first three Squid fields, enter
a line in the
logs.config
file as follows:
format:enabled:1:short_sq:%<cqts> %<ttms> %<chi>:short_sq:ASCII:none
See
Using custom formats‚ on page 103
for more information about defining custom log files.
sscl
The server response transfer length; response length (bytes) from server
to proxy.
sshl
The server response header length; response header length (bytes) from
server to proxy.
sshv
The server response HTTP version (1.0, 1.1, ...).
sssc
The server response status code; the HTTP response status code from
server to proxy.
ttms
The transfer time; total transfer time in milliseconds.
ttmsf
transfer time in milliseconds as a fractional number of seconds; specifies
the transfer time of the document in millisecond resolution, but instead
of formatting the output as an integer (as with ttms), the display is
formatted as a floating point number representing a fractional number of
seconds. For example, if the transfer time is 1500 milliseconds, this field
displays 1.5 while the ttms field displays 1500 and the tts field displays
1.
tts
The transfer time in seconds; specifies the transfer time of the document
in seconds.
Squid
HP field symbols
time
cqts
elapsed
ttms
client
chi
action/code
crc/pssc
size
psql
method
cqhm
url
cquc
ident
caun
hierarchy/from
phr/pqsn
content
psct
%<field symbol>
Description