However, if you're not using Blue Coat Reporter for access log parsing, or if your goal is to output to a different access log than that used by Reporter, then you can create an access log format that encompasses the r-ip log field.Here are the steps to create a new access log format on the ProxySG and log and to get the proxy writing to it:
Step 1: Create a new log facility.
In the Web-based management console, go to Configuration > Access Logging > Formats.
Name the new format, (note - spaces are not permitted).
The above can be edited as required, (cs-ip has already been added), but be sure to use the Test Format button before saving.
Click Apply to save the format.
Step 2: Create a new log.
Select Access Logging > Logs to create a new log to use the format you've created.
Name the new log.
Select the format you created above from the Log Format drop-down list.
(Optional) Provide a Description.
Click OK, then Apply.
Step 3: Configure policy to output to the new log.
Through local policy, install the following CPL to ensure that the proxy writes to the new log (assuming that the new log is called test):
The above can be achieved through the VPM (Blue Coat recommends using a new Web Access Layer for only this purpose) with the Modify Access Logging action object configured with Enable logging to set to the new log you've created.
Step 4: Verify access logging outputs the destination IP.
Open the Statistics tab and click Access Logging.
From the Log drop-down, select your newly created access log.
Click Start Tail and monitor the window.
As client requests are proxied, the access log details displays in this window.Stop the tail for easier reading if information scrolls too quickly (common for busy proxy environments).
Verify that you see the destination IP immediately following the URL and associated path.
This new log contributes to the overall size on disk that the proxy has allotted to logging. You might need to lower the size available on disk for thiis new log or configure an access log upload client to offload the log at regular intervals
For more information on Access Log formats, Local and Visual policy installation, consult the Configuration and Management guide for your version of SGOS, available at: https://bto.bluecoat.com/documentation.
Blue Coat Reporter may not incorporate the new field, as it expects only the data in the BCReporterMain_v1 log facility.
Imported Document ID: 000010963
Subscribing will provide email updates when this Article is updated. Login is required.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
Subscribed to the Article.
Unable to subscribe
Thanks for your additional feedback !!!
Enterprise Support Virtual Agent
Rate Me :
Tell us more:
Welcome! My name is Sami, the Enterprise Support Virtual Agent answering technical support questions.