W3C Extended Log File Format (IIS 6.0)
W3C Extended Log File Format (IIS 6.0)The W3C Extended log file format is the default log file format for IIS. It is a customizable ASCII text-based format. You can use IIS Manager to select which fields to include in the log file, which allows you to keep log files as small as possible. Because HTTP.sys handles the W3C Extended log file format, this format records HTTP.sys kernel-mode cache hits.
Table 10.1 lists and describes the available fields. Default fields are noted.
Table 10.1 W3C Extended Log File FieldsFieldAppears AsDescription Default Y/NDate
date
The date on which the activity occurred.
Y
Time
time
The time, in coordinated universal time (UTC), at which the activity occurred.
Y
Client IP Address
c-ip
The IP address of the client that made the request.
Y
User Name
cs-username
The name of the authenticated user who accessed your server. Anonymous users are indicated by a hyphen.
Y
Service Name and Instance Number
s-sitename
The Internet service name and instance number that was running on the client.
N
Server Name
s-computername
The name of the server on which the log file entry was generated.
N
Server IP Address
s-ip
The IP address of the server on which the log file entry was generated.
Y
Server Port
s-port
The server port number that is configured for the service.
Y
Method
cs-method
The requested action, for example, a GET method.
Y
URI Stem
cs-uri-stem
The target of the action, for example, Default.htm.
Y
URI Query
cs-uri-query
The query, if any, that the client was trying to perform. A Universal Resource Identifier (URI) query is necessary only for dynamic pages.
Y
HTTP Status
sc-status
The HTTP status code.
Y
Win32 Status
sc-win32-status
The Windows status code.
N
Bytes Sent
sc-bytes
The number of bytes that the server sent.
N
Bytes Received
cs-bytes
The number of bytes that the server received.
N
Time Taken
time-taken
The length of time that the action took, in milliseconds.
N
Protocol Version
cs-version
The protocol version —HTTP or FTP —that the client used.
N
Host
cs-host
The host header name, if any.
N
User Agent
cs(User-Agent)
The browser type that the client used.
Y
Cookie
cs(Cookie)
The content of the cookie sent or received, if any.
N
Referrer
cs(Referrer)
The site that the user last visited. This site provided a link to the current site.
N
Protocol Substatus
sc-substatus
The substatus error code.
Y
For information about status codes, see IIS Status Codes.
表 A
字段 名称 说明 日期 Date 动作发生时的日期。 时间 Time 动作发生时的时间。 客户IP 地址 c-ip 访问服务器的客户端IP地址。 用户名 cs-username 通过身份验证的访问服务器的用户名。不包括匿名用户，它用连字符表示。 服务名 s-sitename 客户所访问的Internet服务于以及实例号。 服务器名 s-computername 产生日志条目的服务器的名字。 服务器IP 地址 s-ip 产生日志条目的服务器的IP地址。 服务器端口 s-port 客户端连接的端口号。 方法 cs-method 客户端企图执行的动作（例如GET方法）。 URI Stem cs-uri-stem 被访问的资源，例如Default.asp。 URI Query cs-uri-query 客户所执行的查询。 协议状态 sc-status 用HTTP或者FTP术语所描述的动作状态。 Win32状态 sc-win32-status 用Microsoft Windows的术语所描述的动作状态。 发送字节数 sc-bytes 服务器所发送的字节数。 接受字节数 cs-bytes 服务器所接受到的字节数。 花费时间 time-taken 执行动作所消耗的时间，以毫秒为单位。 协议版本 cs-version 客户端所用的协议（HTTP、FTP）版本。对HTTP协议来说是HTTP 1.0或者HTTP 1.1。 主机 cs-host 主机报头（host header）所显示的内容。 用户代理 cs(User-Agent) 客户所用的浏览器。 Cookie cs(Cookie) 发送或者接受到的cookie内容。 Referrer cs(Referer) 用户浏览的前一个网址，当前网址是从该网址链接过来的。
页:
[1]