Event log files

Support

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Working With Log Files > Event log files

Event log files

Help | Content Gateway | Version 7.7.3

Event log files record information about every request that Websense Content Gateway processes. By analyzing the log files, you can determine how many people use the proxy, how much information each person requested, what pages are most popular, and so on.

Content Gateway supports several standard log file formats, such as Squid and Netscape, and user-defined custom formats. You can analyze the standard format log files with off-the-shelf analysis packages. To help with log file analysis, you can separate log files so that they contain information specific to protocol or hosts. You can also configure Content Gateway to roll log files automatically at specific intervals during the day.

The following sections describe how to:

Manage your event log files

You can choose a central location for storing log files, set how much disk space to use for log files, and set how and when to roll log files. See Managing event log files.

Choose different event log file formats

You can choose which standard log file formats you want to use for traffic analysis (for example, Squid or Netscape). Alternatively, you can use the Content Gateway custom format, which is XML-based and enables you to institute more control over the type of information recorded in log files. See Event log file formats.

Roll event log files automatically

You can configure Content Gateway to roll event log files at specific intervals during the day so that you can identify and manipulate log files that are no longer active. See Rolling event log files.

Separate log files according to hosts

You can configure the proxy to create separate log files for different protocols based on the host. See Splitting event log files.

Collate log files from different nodes

You can designate one or more nodes on the network to serve as log collation servers. These servers, which might either be stand-alone or part of Content Gateway, enable you to keep all logged information in well-defined locations. See Collating event log files.

View statistics about the logging system

Content Gateway provides statistics about the logging system. You can access the statistics through Content Gateway Manager or through the command line interface. See Viewing logging statistics.

You can view the system, event, and error log files that Content Gateway creates. You can view an entire log file, a specified last number of lines in the log file, or all lines that contain a specified string.

Interpret log file entries for the standard log file formats. See Example event log file entries.

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Working With Log Files > Event log files