ATS 自定义日志格式

字段解释

%<chi>                客户端IP
%<caun>               The username of the authenticated client. A hyphen (-) means that no authentication was required.
%<ttms>               响应时间，单位是毫秒/ms
%<cqts>               时间戳（The time of the client request since January 1, 1970 UTC (EPOCH), with second resolution.）
%<cqhm>               The client request method: GET, POST, and so on.
%<cquuc>              原始的URL，即 This field records a URL before it is remapped (reverse proxy mode).
%<cqhv>               HTTP版本，The client request HTTP version.
%<pssc>               HTTP状态码
%<psql>               边缘server 返回的response长度，包括响应体和响应头，单位是 字节/byte
%<hii>                边缘server IP
%<pqsi>               回源server的IP，边缘server未命中，同机房server回源/上层server回源
%<crc>                边缘server响应的状态码
%<phr>                回源server响应的状态码
%<{Via}psh>           边缘server响应HTTP头部信息，截取Via信息
%<{Referer}cqh>       客户端请求的HTTP头部信息，截取Referer信息
%<{User-Agent}cqh>    客户端请求的HTTP头部信息，截取User-Agent信息

# 更多详细信息参考：https://docs.trafficserver.apache.org/en/6.2.x/admin-guide/monitoring/logging/log-formats.en.html

Cache Result Codes

    1）"TCP_MEM_HIT:NONE"                  边缘server内存命中（官网没有找到相关说明，自己臆断而来）
    2）"TCP_HIT:NONE"                      边缘server缓存命中
    3）"TCP_MISS:SIBLING_HIT"              边缘server Miss，icp同机房回源命中
    4）"TCP_MISS:PARENT_HIT"               边缘server Miss，icp Miss，parent回源命中
    5）"TCP_REFRESH_HIT:PARENT_HIT"        边缘server含有客户端请求的object，但是不新鲜，所以边缘server向parent发起一个“if-modified-since”请求，parent返回304not-modified的响应，最后边缘server将本地的object返回。
    6）"TCP_REFRESH_MISS:PARENT_HIT"       边缘server含有客户端请求的object，但是不新鲜，所以边缘server向parent发起一个“if-modified-since”请求，parent返回一个新的object给边缘server，最后边缘server将新获取到的object返回。
    7）"ERR_CLIENT_ABORT:SIBLING_HIT"      客户端还没有完成数据的获取就断掉了链接（icp回源）
    8）"ERR_CLIENT_ABORT:PARENT_HIT"       客户端还没有完成数据的获取就断掉了链接（parent回源）
    ...
    9）"TCP_IMS_HIT:NONE"                  The client issued an if-modified-since request and the object was in cache and fresher than the IMS date, or an if-modified-since request to the origin server revealed the cached object was fresh. Traffic Server served the cached object to the client.
    10）"TCP_IMS_MISS:PARENT_HIT"      
    11）"TCP_REF_FAIL_HIT:"                The object was in the cache but was stale. Traffic Server made an if-modified-since request to the origin server but the server did not respond. Traffic Server sent the cached object to the client.
     ...
        "ERR_CONNECT_FAIL:DIRECT"
        "ERR_CONNECT_FAIL"        ->       Traffic Server could not reach the origin server.

    # 更多详细信息参考：https://docs.trafficserver.apache.org/en/6.2.x/admin-guide/monitoring/logging/log-formats.en.html#cache-result-codes

logs_xml.config

1 <LogFormat>
2     <Name = "access"/>
3     <Format = "\"live\" \"0.1\" \"%<chi>\" \"%<caun>\" \"%<ttms>\" \"%<cqts>\" \"%<cqhm>\" \"%<cquuc>\" \"%<cqhv>\" \"%<pssc>\" \"%<psql>\" \"%<hii>\" \"%<pqsi>\" \"%<crc>:%<phr>\" \"%<{Via}psh>\" \"%<{Referer}cqh>\" \"%<{User-Agent}cqh>\""/>
4 </LogFormat>
5 <LogObject>
6     <Format = "access"/>
7     <Filename = "access.log"/>
8 </LogObject>