KB Article | Forcepoint Support

Problem Description

How can transaction logs in the WCG be enabled and what do the they mean?
 

Resolution

Important transaction Logs consume resources in the WCG domain. Always consider to turn them on for troubleshooting purposes and turn them off afterwards.

In order to enable the transaction logs in the WCG:
  1. Click Configure > Subsystem > Logging.
  2. Select Log Transactions and Errors under the Logging section.
  3. Click Apply.
User-added image

In order to access the transaction logs:
  1. Click Configure > My Proxy > Logs.
  2. Click the Access tab.
  3. Select the log file desired like extended.log as an example.
User-added image


In order to understand the logging format please read the meaning of each field:
 
User-added image
FieldDescription
1The IP address of the client’s host machine.
2This hyphen (-) is always present in Netscape log entries.
3The authenticated client user name. A hyphen (-) means no authentication was required.
4The date and time of the client’s request, enclosed in brackets.
5The request line, enclosed in quotes.
6The proxy response status code (HTTP reply code).
7The length of the Content Gateway response to the client in bytes.
8The origin server’s response status code.
9The server response transfer length; the body length in the origin server’s response to the proxy, in bytes.
10The client request transfer length; the body length in the client’s request to the proxy, in bytes.
11The proxy request transfer length; the body length in the proxy request to the origin server.
12The client request header length; the header length in the client’s request to the proxy.
13The proxy response header length; the header length in the proxy response to the client.
14The proxy request header length; the header length in the proxy request to the origin server.
15The server response header length; the header length in the origin server’s response to the proxy.
16The time Content Gateway spent processing the client request; the number of seconds between the time that the client established the connection with the proxy and the time that the proxy sent the last byte of the response back to the client.
There are several types of transaction logs configurable in the WCG. By default the WCG uses the "Netscape Extended Logs" (hence the name extended.log).

It's possible to configure other types of transaction logs under Configure > Subsystem > Logging in the Format tab.

Further informations about WCG Logging can be found in the WCG Help pages:

https://X.X.X.X:8081/help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=c_log.htm
https://X.X.X.X:8081/help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=log_samples.htm

where X.X.X.X is the WCG address (or the C interface address in case of Appliances).
 

Article Feedback



Thank you for the feedback and comments.