Log File Formats

Sambar Server Documentation

Log File Formats

The Sambar Server supports three log file formats: common, combined and performance. Both common and combined log formats are commonly used by NCSA and Apache. The performance log format is a derivative of the combined log format with page delivery performance measurements.

Common Log Format

The following is a sample common log format file:

sandbox.sambar.com - - [09/Sep/1997:10:42:45 -0800] "GET / HTTP/1.0" 200 1234
sandbox.sambar.com - - [09/Sep/1997:10:43:22 -0800] "GET /docs/index.htm HTTP/1.0" 304 0
sandbox.sambar.com - admin [09/Sep/1997:10:46:12 -0800] "GET /sysadmin/index.stm HTTP/1.0" 200 0
207.86.139.145 - - [09/Sep/1997:10:47:43 -0800] "GET /wwwping/index.htm HTTP/1.0" 200 954
207.86.139.145 - - [01/Jan/1997:13:06:51 -0600] "GET /session/wwwping HTTP/1.0" 200 0

The common log file format has the following fields:

remotehost	Remote hostname or IP address number if DNS is not enabled/available.
rfc931	The remote login name of the user. (This is not implemented by the Sambar Server).
authuser	The username of the authenticated user. This is available when using password protected WWW pages.
[date]	Date and time of the request.
"request"	The HTTP request line as it came from the client.
status	The HTTP response code returned to the client. Indicates whether or not the file was successfully retrieved, and if not, what error message was returned.
bytes	The number of bytes transferred. If the status is 200 and bytes are 0, the dynamic page size could not be determined.

Extended Common Log Format

The extended common log format is a variant of the common log format; this format adds two additional fields to the end of the log line, the referer and the user agent fields. The following is a typlical log line:

sandbox.sambar.com - - [09/Sep/1997:10:42:45 -0800] "GET / HTTP/1.0" 200 1234 "http://www.skyweb.se/sambar/" "Mozilla/4.0 (Win95; I)"

The extended common log file format has the following fields:

remotehost	Remote hostname or IP address number if DNS is not enabled/available.
rfc931	The remote login name of the user. (This is not implemented by the Sambar Server).
authuser	The username of the authenticated user. This is available when using password protected WWW pages.
[date]	Date and time of the request.
"request"	The HTTP request line as it came from the client.
status	The HTTP response code returned to the client. Indicates whether or not the file was successfully retrieved, and if not, what error message was returned.
bytes	The number of bytes transferred. If the status is 200 and bytes are 0, the dynamic page size could not be determined.
"referer"	The url the client was on before requesting this url.
"agent"	The browser the client is using.

Performance Log Format

The performance log format is specific to the Sambar Server. It is a variant of the extended common log format; the time in milliseconds that it took to respond to the client's request is inserted into the stream after the bytes. The following is a typlical log line:

sandbox.sambar.com - - [09/Sep/1997:10:42:45 -0800] "GET / HTTP/1.0" 200 1234 75 "http://www.skyweb.se/sambar/" "Mozilla/4.0 (Win95; I)"

The performance log file format has the following fields:

remotehost	Remote hostname or IP address number if DNS is not enabled/available.
rfc931	The remote login name of the user. (This is not implemented by the Sambar Server).
authuser	The username of the authenticated user. This is available when using password protected WWW pages.
[date]	Date and time of the request.
"request"	The HTTP request line as it came from the client.
status	The HTTP response code returned to the client. Indicates whether or not the file was successfully retrieved, and if not, what error message was returned.
bytes	The number of bytes transferred. If the status is 200 and bytes are 0, the dynamic page size could not be determined.
msec	The time in milliseconds that it took the server to respond to the request.
"referer"	The url the client was on before requesting this url.
"agent"	The browser the client is using.

HTTP Error Codes

The Sambar Server logs the following HTTP error codes:

200	OK
201	Created
202	Accepted
204	No Content
206	Partial Content
301	Moved Permanently
302	Moved Temorarily
304	Not Modified
400	Bad Request
401	Unauthorized
403	Forbidden
404	Not Found
408	Request Timeout
414	Request URI Too Large
499	Send Interrupted
500	Internal Server Error