<< Click to Display Table of Contents >> Navigation: Event and Object Analysis > Capture Results Filtering > Prefiltering HTTP Requests > Actions > ACCESS-LOG Action |
Saves the information about the current HTTP object to the log channel in the SQUID-ACCESS-LOG format.
Description
The access-log action saves the information about the current HTTP object to the log channel in the SQUID-ACCESS-LOG format.
Format
<action name="access-log" value="<log-channel-name>" />
The name attribute:
The name attribute specifies the name of the action - name="access-log".
The value attribute:
The value="..." attribute specifies the log channel name. This channel should be pre-configured in the EtherSensor Watcher service.
Example
Log all requests to all-log-channel, and additionally log requests to win.mail.ru to mail-ru-log-channel.
<?xml version="1.0" encoding="utf-8"?>
<filter name="TEST" version="1.0">
<comment>This is a comment for the filter.</comment>
<table name="main">
<rule enabled="true">
<comment>
Log requests for win.mail.ru to mail-ru-log-channel.
</comment>
<match>
<c name="req-header"
headername="Host"
op="eq"
value="win.mail.ru" />
</match>
<action name="access-log" value="mail-ru-log-channel"/>
</rule>
<rule enabled="true">
<comment>
Log all requests to all-log-channel.
</comment>
<action name="access-log" value="all-log-channel"/>
<action name="accept" />
</rule>
</table>
</filter>