Document toolboxDocument toolbox

Web

This group includes tags that start with the level web. These tags identify data generated by web application firewalls.

Company Product / service Valid tags

Apache Web Server 

  • web.apache.access-clf
  • web.apache.access-combined
  • web.apache.access-lt
  • web.apache.access-lt-xff
  • web.apache.access-vhc
  • web.apache.error
  • web.apache.mod-jk
  • web.apache.mod-security

Check more info about these parsers

Arbor Solutions (now part of Netscout)

  • web.arbor.access

Amazon Web Services 

  • web.aws.cloudfront.access-w3c
  • web.aws.elb.access

EdgeCast 

  • web.edgecast.access-w3c

GlassFish Application Server 

  • web.glassfish.server

Oracle iPlanet Web Server 

  • web.iplanet.access-clf2
  • web.iplanet.error



IBM InfoSphere Information Server

  • web.iis.access-ncsa.<env>.<app>.<clon>
  • web.iis.access-w3c.<env>.<app>.<clon>
  • web.iis.access-w3c-all.<env>.<app>.<clon>

Check more info about these parsers

IBM WebSEAL 

  • web.webseal.access-combined

IBM WebSphere Application Server

  • web.websphere.error
  • web.websphere.gc
  • web.websphere.gc-stdout
  • web.websphere.gc-summary
  • web.websphere.out

JBoss web application server (currently known as WildFly)

  • web.jboss.access-clf
  • web.jboss.access-combined
  • web.jboss.access-lt
  • web.jboss.boot
  • web.jboss.server

Check more info about these parsers

-

Level3 web server 

  • web.level3.access-w3c

NGINX webserver 

  • web.nginx.access-combined
  • web.nginx.access-lt
  • web.nginx.access-lt-xff
  • web.nginx.access-main
  • web.nginx.error

Check more info about these parsers

Apache Tomcat web application server

  • web.tomcat.access-clf
  • web.tomcat.access-combined
  • web.tomcat.access-lt
  • web.tomcat.app
  • web.tomcat.app-lt
  • web.tomcat.catalina
  • web.tomcat.catalina-lt
  • web.tomcat.gc
  • web.tomcat.out

Check more info about these parsers