Administrator's Guide - Kerio Software Archive

Logs
Note: With the above three examples, the relevant records will also appear in the Security
log.
22.14 Web Log
This log contains all HTTP requests that were processed by the HTTP inspection module (see
section 15.3) or by the built-in proxy server (see section 9.4). Unlike in the HTTP log, the Web
log displays only the title of a page and the WinRoute user or the IP host viewing the page. In
addition to each URL, name of the page is provided for better reference.
For administrators, the Web log is easy to read and it provides the possibility to monitor which
Websites were opened by each user.
How to read the Web Log
[24/Apr/2008 10:29:51] 192.168.44.128 james
"Kerio Technologies" http://www.kerio.com/
• [24/Apr/2008 10:29:51] — date and time when the event was logged
• 192.168.44.128 — IP address of the client host
• james — name of authenticated user (if no user is authenticated through the client
host, the name is substituted by a dash)
• "Kerio Technologies" — page title
(content of the HTML element)
Note: If the page title cannot be identified (i.e.
"Encoded content" will be reported.
for its content is compressed), the
• http://www.kerio.com/ — URL pages
306