Project

General

Profile

Actions

Feature #38

closed

Configuration for custom log format for HTTP log

Added by Victor Julien almost 15 years ago. Updated about 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

It would be nice to be able to configure the HTTP logs layout. Currently it's modeled after apache's default log format.

This will likely be a task at some point.


Files

log-httplog.c.patch (2.62 KB) log-httplog.c.patch Victor Julien, 06/10/2011 03:18 AM
log-httplog.c.patch (4.51 KB) log-httplog.c.patch Chris Wakelin, 06/10/2011 04:20 AM

Related issues 1 (0 open1 closed)

Related to Suricata - Feature #478: XFF (X-Forwarded-For)ClosedIgnacio Sanchez06/08/2012Actions
Actions #1

Updated by Victor Julien almost 15 years ago

  • Assignee set to Victor Julien
Actions #2

Updated by Victor Julien over 14 years ago

  • Target version changed from 1.0.0 to TBD
Actions #3

Updated by Victor Julien almost 14 years ago

  • Assignee changed from Victor Julien to Anonymous
  • Target version deleted (TBD)
Actions #4

Updated by delta yeh over 13 years ago

Any proposal for this task?
I would like to take it if the proposal is available.

Actions #5

Updated by Victor Julien over 13 years ago

The attached patch is from Chris Wakelin to allow logging of the referrer and protocol. I was planning to add that and make logging of both optional. Maybe thats a good start?

Other than that, there is no proposal.

Actions #6

Updated by Chris Wakelin over 13 years ago

Here's an updated patch that adds status code and response size, if available from the response headers and redirection URL if specified (in addition to referer, method and protocol in the above patch).

I had a look at making it optional, but decided the threading would mean changing too much and I'd better leave it to the experts!

Actions #7

Updated by Victor Julien over 13 years ago

Thanks Chris, nice work.

Actions #8

Updated by Victor Julien about 13 years ago

  • Status changed from New to Assigned
  • Assignee changed from Anonymous to Eric Leblond
  • Priority changed from Low to Normal
  • Target version set to 1.1rc1
  • % Done changed from 0 to 30
  • Estimated time set to 4.00 h
Actions #9

Updated by Eric Leblond about 13 years ago

  • % Done changed from 30 to 90

Pull request sent to Victor. Chris patch is the starting point.

Actions #10

Updated by Victor Julien about 13 years ago

  • Status changed from Assigned to Closed
  • % Done changed from 90 to 100

Patches applied, thanks Eric and also thanks to Chris for getting this moving.

The http-log section has a new option "extended: yes" to activate the extended output. Default is to log without the extended fields.

Actions

Also available in: Atom PDF