Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
469 Views 2 Replies Latest reply: Jan 16, 2013 6:31 PM by parinya.ekparinya RSS
parinya.ekparinya Newcomer 48 posts since
Aug 17, 2012
Currently Being Moderated

Jan 10, 2013 5:55 AM

URL in web server access log

I did try collect web server access log, e.g. Apache & IIS access log, and see fields in custom type do not contain URL but only file name filled in Object field. So I did custom Apache Advacned Syslog Parser myself for this purpose.

My question is should default parser extract URL into URL field? Do I miss something?

One more question is how can I filter events on ESM with URL? There is no URL field to choose from list of filter.

 

Attached is my custom ASP for Apache access log.

 

Regards,

 

Parinya

 

Message was edited by: parinya.ekparinya on 1/10/13 5:55:21 AM CST
Attachments:

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points