Splitting event log files

By default, Websense Content Gateway uses standard log formats and generates log files that contain HTTP and FTP transactions in the same file. However, you can enable host log splitting if you prefer to log transactions for different origin servers in separate log files.

HTTP host log splitting

Help | Content Gateway | Version 8.1.x

HTTP host log splitting enables you to record HTTP and FTP transactions for different origin servers in separate log files. When HTTP host log splitting is enabled, Content Gateway creates a separate log file for each origin server listed in the log_hosts.config file (see Editing the log_hosts.config file).

When HTTP host log splitting is enabled, Content Gateway generates separate log files for HTTP/FTP transactions, based on the origin server.

For example, if the log_hosts.config file contains the two origin servers uni.edu and company.com, and the Squid format is enabled, Content Gateway generates the following log files:


Log Filename	Description
squid-uni.edu.log	All HTTP and FTP transactions for uni.edu
squid-company.com.log	All HTTP and FTP transactions for company.com
squid.log	All HTTP and FTP transactions for other hosts

Content Gateway also enables you to create XML-based custom log formats that offer even greater control over log file generation based on protocol and host name. See Custom format.