Extended Logging Properties

[This is preliminary documentation and subject to change]

Extended Logging Properties

You can customize W3C Extended logging by choosing the fields to be recorded in the log. To limit log size, omit unneeded fields.

The fields are as follows:

Date The date on which the activity occurred.
Time The time the activity occurred.

Extended Properties

Client IP Address The IP address of the client that accessed your server.
User Name The name of the user who accessed your server.
Service Name The Internet service that was running on the client computer.
Server Name The name of the server on which the log entry was generated.
Server IP The IP address of the server on which the log entry was generated.
Server Port The port number the client is connected to.
Method The action the client was trying to perform (for example, a GET command).
URI Stem The resource accessed: for example, an HTML page, a CGI program, or a script.
URI Query The query, if any, the client was trying to perform; that is, one or more search strings for which the client was seeking a match.
HTTP Status The status of the action, in HTTP terms.
Win32 Status The status of the action, in terms used by Windows.
Bytes Sent The number of bytes sent by the server.
Bytes Received The number of bytes received by the server.
Time Taken The length of time the action took.
Protocol Version The protocol (HTTP, FTP) version used by the client. For HTTP this will be either HTTP 1.0 or HTTP 1.1.
User Agent The browser used on the client.
Cookie The content of the cookie sent or received, if any.
Referer The site on which the user clicked on a link that brought the user to this site.

CPU Accounting

Event The type of process that triggered the event, either CGI or out-of-process application. The type can be CGI, Application, or All.
Process Type What event was triggered: Site-Stop, Site-Start, Site-Pause, Periodic-Log, Interval-Start, Interval-End, Interval-Change, Update, Eventlog-Limit, Priority-Limit, Process-Stop-Limit, Site-Pause-Limit, Eventlog-Limit-Reset, Priority-Limit-Reset, Process-Stop-Limit-Reset, or Site-Pause-Limit.
- Site-Stop The Web site was stopped.
- Site-Start The Web site was started or re-started.
- Site-Pause The Web site was paused.
- Periodic-Log This is a regularly defined log entry whose interval was specified by the administrator.
- Reset Interval-Start The Reset Interval has begun.
- Reset Interval-End The Reset Interval has been reached and reset.
- Reset Interval-Change The Web site administrator changed the value for the Reset Interval.
- Update One of these events happened: the log interval was changed, and interval event took place, the site either stopped started, or paused.
- Eventlog-Limit An event log was made for the Web site because its CPU resource usage for CGI and out-of-process application reached the event log limit set by the administrator.
- Priority-Limit The Web site had a CGI or out-of-process application set to low priority because it reached the low priority limit set by the administrator.
- Process-Stop-Limit The Web site had a CGI or out-of-process application stopped because it reached the process stopping limit set by the administrator.
- Site-Pause-Limit The Web site was paused because it had a CGI or out-of-process application reach the site pause limit set by the administrator.
- Eventlog-Limit-Reset The Reset Interval was reached or the Eventlog-Limit was manually changed.
- Priority-Limit-Reset The Reset Interval was reached or the Priority-Limit was manually changed.
- Process-Stop-Limit-Reset The Reset Interval was reached or the Process-Stop-Limit was manually changed.
- Site-Pause-Limit The Reset Interval was reached or the Site-Pause-Limit was manually reset.
User Time The total accumulated User Mode processor time, in seconds, that the site has used during the current interval.
Kernel Time The total accumulated Kernel Mode processor time, in seconds, that the site has used during the current interval.
Page Faults The total number of memory references that resulted in memory page faults.
Total Processes The total number of CGI and out-of-process applications created during the current interval.
Active Processes The total number of CGI and out-of-process applications running when the log was recorded.
Terminated Processes The total number of CGI and out-of-process applications stopped due to Process Throttling during the current interval.