Usage:
logformat
Defines an access log format.
The is a string with embedded % format codes
% format codes all follow the same basic structure where all but
the formatcode is optional. Output strings are automatically escaped
as required according to their context and the output format
modifiers are usually not needed, but can be specified if an explicit
output format is desired.
% ["|[|'|#] [-] [[0]width] [{argument}] formatcode
"output in quoted string format
[output in squid text log format as used by log_mime_hdrs
#output in URL quoted format
'output as-is
-left aligned
widthminimum and/or maximum field width:
[width_min][.width_max]
When minimum starts with 0, the field is zero-padded.
String values exceeding maximum width are truncated.
{arg}argument such as header name etc
Format codes:
%a literal % character
snUnique sequence number per log line entry
err_code The ID of an error response served by Squid or
a similar internal error identifier.
err_detail Additional err_code-dependent error information.
Connection related format codes:
>aClient source IP address
>AClient FQDN
>pClient source port
>euiClient source EUI (MAC address, EUI-48 or EUI-64 identifier)
>laLocal IP address the client connected to
>lpLocal port number the client connected to
laLocal listening IP address the client connection was connected to.
lpLocal listening port number the client connection was connected to.
a [%tl] "%{User-Agent}>h"
NOTE: When the log_mime_hdrs directive is set to ON.
The squid, common and combined formats have a safely encoded copy
of the mime headers appended to each line within a pair of brackets.
NOTE: The common and combined formats are not quite true to the Apache definition.
The logs from Squid contain an extra status and hierarchy code appended.