From users-return-7391-archive-asf-public=cust-asf.ponee.io@trafficserver.apache.org Mon Nov 19 19:47:42 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 4EC13180671 for ; Mon, 19 Nov 2018 19:47:42 +0100 (CET) Received: (qmail 67109 invoked by uid 500); 19 Nov 2018 18:47:41 -0000 Mailing-List: contact users-help@trafficserver.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@trafficserver.apache.org Delivered-To: mailing list users@trafficserver.apache.org Received: (qmail 67098 invoked by uid 99); 19 Nov 2018 18:47:41 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 19 Nov 2018 18:47:41 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id BBAF6181927 for ; Mon, 19 Nov 2018 18:47:40 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.34 X-Spam-Level: X-Spam-Status: No, score=0.34 tagged_above=-999 required=6.31 tests=[DKIMWL_WL_MED=-1.459, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id mqXyGYNoEcaL for ; Mon, 19 Nov 2018 18:47:39 +0000 (UTC) Received: from mail-it1-f179.google.com (mail-it1-f179.google.com [209.85.166.179]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id DD72A5F542 for ; Mon, 19 Nov 2018 18:47:38 +0000 (UTC) Received: by mail-it1-f179.google.com with SMTP id v11so9059474itj.0 for ; Mon, 19 Nov 2018 10:47:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=nWftIB8gBvAXvtvJWuGTMw5gP8nvFo1FPnv+1p8r7mI=; b=FQ4H123Te/BpS8XaCfDs/BZzxx/JzCOPoJ+l06Rjer3Rn/DPsG3YMCQLltyZu61ep4 NGVktbrU7LNkIORiklrJ+iqXCOiEEC2t4RE05XGaKTAJX/JkOdwj4xwtmpYRYPsGVx5U HXEUqVbxeshqI4JpjIV/eGw/lXjW/wWStyZ8dJbCl1KCdcoWT847bIGplQBEQlLmtbCs xUbi2MJ5QKaYW+AWHayzsf2P2QF0kfvGNk9KHDv9PB5fTiz7QUR9Wtnd7n6BKLVTMqSZ 0m/067PUZCQ4JzRvdvgZngzm/BO1qB3h+7FBvM6JVGRHtwtg+6+BrL8t8/+ThaMJFFjc /35w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=nWftIB8gBvAXvtvJWuGTMw5gP8nvFo1FPnv+1p8r7mI=; b=eCg9gC4as9xSupXlSbDfRjVheon9X64sUgt40tcZc+caRXNZsvU4s8auFyc6mKd+R6 ezXIwOaLmsdnZC1+C9H51ySiuYvulG8hDqK2Bvj6XMo6qpZlpkI5GSIWq+6O8+EUl+4e Ee4ewMLCXMXE+mmQ7dnpATOJInr/dYVQx/e8uuJQvQR1X0qUq65nhbe3wywkckR1vWXD 35lRc2ECDNT7SdAIcSavHXMXvoptUork5Ls8XMLMnd6oVNGxXln6USQAfPtzIt0BWwrz J4PZnb2Ix1JjQevficGl0XmYROkkQouIWOiAi9qLuAE05Owm4FcTyoArMwxoVCfu4E2W x8kQ== X-Gm-Message-State: AGRZ1gIlisFZriIY+K3COyMefUaBwekaTZdJjAlIvJfTVrurHGnGm1Wt zwXexEZMrs4w0cTfJ+GR2kC6gFasu1sjpjpktVd2ljUe X-Google-Smtp-Source: AJdET5dr2f9fPoucPeIY4jaVZCAhYuULOz/jVOuZdHACDBqQI49ANj2nCERTXtcaqaZuW2mmmo8CTeWhNb/jlGo0oCQ= X-Received: by 2002:a02:63cb:: with SMTP id j194-v6mr8161559jac.27.1542653256907; Mon, 19 Nov 2018 10:47:36 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Sevan Gelici Date: Mon, 19 Nov 2018 19:47:22 +0100 Message-ID: Subject: Re: trafficserver 8 - Logging Client request (domain) To: users@trafficserver.apache.org Content-Type: multipart/alternative; boundary="00000000000063bfb8057b08f300" --00000000000063bfb8057b08f300 Content-Type: text/plain; charset="UTF-8" I just did a few tests example - format: "id=firewall time=\"% %\" fw=% pri=6 proto=% duration=% sent=% rcvd=% src=% dst=% dstname=% user=% op=% arg=\"%\" result=% ref=\"%<{Referer}cqh>\" agent=\"%<{user-agent}cqh>\" cache=%" logs: - filename: squid format: welf mode: ascii After i put the value cqtx somewhere randomly my squid.log not working. When i remove cqtx its working. Op ma 19 nov. 2018 om 19:30 schreef Miles Libbey : > Could you also post your formats definition? > > eg > formats: > - format: "id=firewall time=\"% %\" fw=% pri=6 > proto=% duration=% sent=% rcvd=% src=% > dst=% dstname=% user=% op=% arg=\"%\" > result=% ref=\"%<{Referer}cqh>\" agent=\"%<{user-agent}cqh>\" > cache=%" > name: welf > > On Sat, Nov 17, 2018 at 11:31 PM Sevan Gelici > wrote: > > > > Hello, > > > > I dont know if its a issue or if i do it wrong but logging in > trafficserver 8.0 doesnt work well for me. When i add to > "/etc/trafficserver/logging.yaml" the value % its not giving me > output anymore. > > > > In the default logging.yaml i modified this part > > logs: > > - filename: squid > > format: welf > > mode: ascii > > this works but when i modify as example % to % it doesnt > work anymore. > > > > Could someone explain why it doesnt log anymore after giving these value? > > > > > > - > https://ats-zh.readthedocs.io/en/latest/admin/event-logging-formats.en.html#custom-logging-fields > > - http://trafficserver.apache.org/logbuilder/ > > > > > > Kind regards, > > > > Sevan Gelici > --00000000000063bfb8057b08f300 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I just did a few tests example

- format= : "id=3Dfirewall time=3D\"%<cqtx> %<cqtt>\" fw=3D%<phn> pri=3D6
proto=3D= %<cqus> duration=3D%<ttmsf> sent=3D%<psql> rcvd=3D%<cq= hl> src=3D%<chi>
dst=3D%<shi> dstname=3D%<shn> user= =3D%<caun> op=3D%<cqhm> arg=3D\"%<cqup>\"
re= sult=3D%<pssc> ref=3D\"%<{Referer}cqh>\" agent=3D\&qu= ot;%<{user-agent}cqh>\"
cache=3D%<crc>"=C2=A0=C2= =A0

=C2=A0l= ogs:
=C2=A0 =C2=A0 =C2=A0- filename: squid
=C2=A0 =C2=A0 =C2=A0 =C2=A0format:= welf
=C2=A0 =C2=A0 =C2=A0 =C2=A0mode: ascii=C2=A0=C2=A0

After i put the value=C2=A0cqtx somewhere randomly my squid.log not working. When i remove=C2=A0cqtx its working.

Op ma 19 nov. 2018 om 19:3= 0 schreef Miles Libbey <mlibbey@ap= ache.org>:
Could you also po= st your formats definition?

eg
formats:
- format: "id=3Dfirewall time=3D\"%<cqtd> %<cqtt>\&qu= ot; fw=3D%<phn> pri=3D6
proto=3D%<cqus> duration=3D%<ttmsf> sent=3D%<psql> rcvd= =3D%<cqhl> src=3D%<chi>
dst=3D%<shi> dstname=3D%<shn> user=3D%<caun> op=3D%<cq= hm> arg=3D\"%<cqup>\"
result=3D%<pssc> ref=3D\"%<{Referer}cqh>\" agent=3D\&= quot;%<{user-agent}cqh>\"
cache=3D%<crc>"
name: welf

On Sat, Nov 17, 2018 at 11:31 PM Sevan Gelici <sevangelici@gmail.com> wrote:
>
> Hello,
>
> I dont know if its a issue or if i do it wrong but logging in traffics= erver 8.0 doesnt work well for me. When i add to "/etc/trafficserver/l= ogging.yaml" the value=C2=A0 %<cqtx>=C2=A0 its not giving me out= put anymore.
>
> In the default logging.yaml i modified this part
> logs:
>=C2=A0 =C2=A0 =C2=A0- filename: squid
>=C2=A0 =C2=A0 =C2=A0 =C2=A0format: welf
>=C2=A0 =C2=A0 =C2=A0 =C2=A0mode: ascii
> this works but when i modify as example %<ttms> to %<cqtx>= it doesnt work anymore.
>
> Could someone explain why it doesnt log anymore after giving these val= ue?
>
>
> - https://ats-zh.readthedocs.io/en/latest/admin/event-logging-formats.en.= html#custom-logging-fields
> - http://trafficserver.apache.org/logbuilder/ >
>
> Kind regards,
>
> Sevan Gelici
--00000000000063bfb8057b08f300--