ACCESS-LOG Action

<< Click to Display Table of Contents >>

Navigation:  Event and Object Analysis > Capture Results Filtering > Prefiltering HTTP Requests > Actions >

ACCESS-LOG Action

Saves the information about the current HTTP object to the log channel in the SQUID-ACCESS-LOG format.

Description

   The access-log action saves the information about the current HTTP object to the log channel in the SQUID-ACCESS-LOG format.

Format

<action name="access-log" value="<log-channel-name>" />

The name attribute:

The name attribute specifies the name of the action - name="access-log".

The value attribute:

The value="..." attribute specifies the log channel name. This channel should be pre-configured in the EtherSensor Watcher service.

Example

Log all requests to all-log-channel, and additionally log requests to win.mail.ru to mail-ru-log-channel.

<?xml version="1.0" encoding="utf-8"?>
<filter name="TEST" version="1.0">
 <comment>This is a comment for the filter.</comment>
 <table name="main">
 
   <rule enabled="true">
     <comment>
       Log requests for win.mail.ru to mail-ru-log-channel.
     </comment>
     <match>
       <c name="req-header"
          headername="Host"
          op="eq"
          value="win.mail.ru" />
     </match>
     <action name="access-log" value="mail-ru-log-channel"/>
   </rule>
 
   <rule enabled="true">
     <comment>
       Log all requests to all-log-channel.
     </comment>
     <action name="access-log" value="all-log-channel"/>
     <action name="accept" />
   </rule>
 
 </table>
</filter>