webkeeper-logs
Fetch web proxy logs from Elastic of WebKeeper SG.
webkeeper-logs profile=PROFILE [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [offset=NUM] [limit=NUM]
- profile=PROFILE
- The identifier of WebKeeper SG connect profile
- duration=NUM{mon|w|d|h|m|s}
- Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example,
10s
means data from 10 seconds earlier. - from=yyyyMMddHHmmss
- Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- to=yyyyMMddHHmmss
- End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- offset=NUM
- Skip count
- limit=NUM
- Max output count
Output Fields
Field | Type | Name | Description |
---|---|---|---|
_time | Date | Time | |
guid | String | Log GUID | |
agent_id | String | Agent ID | |
user | String | User | |
emp_name | String | Employee name | |
dept_name | String | Department name | |
src_ip | IP address | Source IP | |
dst_ip | IP address | Destination IP | |
dst_port | Integer | Destination port | |
policy | String | Policy | |
category_code | Long | Category code | e.g. 900010000000512 |
category | String | Category name | e.g. Internet (general) |
method | String | HTTP Method | e.g. GET, POST |
domain | String | Domain | |
path | String | Path | |
query | String | Query string | |
referer | String | HTTP referer | |
file_num | Integer | File count | |
keyword | String | Keyword | |
post_size | Integer | HTTP post size | |
pass_block_type | String | Block type | 0: PERMIT, 256: CATEGORY_BLOCK, 512: SIZE_BLOCK |
post_size_limit | Integer | POST size limit | |
dept_code | String | Department code | |
user_guid | String | User GUID |