Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 1647 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Log file details documentation

JimmyM
I've built a few Java processes that will read ASG logs sent to an FTP server and insert them into a MySQL DB for later processing/reporting. Works great. It parses each of the data types, srcip, dstip, statuscode, etc into individual columns. However, I'm trying to make these jobs as thorough as possible. So I'd like some details regarding what the different values in the log files are.
The http log for instance has entries for id, srcip, dstip, user, statuscode, etc. I can figure out that srcip is source IP, etc, However, the ID data has values like 0001, 0002, 0003, 0064, 0067. What do these values mean? what values are possible for "id", etc.

Is this documented anywhere?


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to BAlfson
    Thanks, Bob. 
    There are some additional HTTP log entries in my logs that aren't listed in that page. It also shows that it's for v7.504 and its status is outdated.
    That's a really good start though. There's a lot of stuff there that doesn't seem to have changed since then. I can get started on that stuff.