It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Application Firewall

How do I configure FTP Access Logs on the Barracuda Web Appliaction Firewall?

  • Type: Knowledgebase
  • Date changed: 2 years ago
Solution #00005877


This solution applies to the Barracuda Web Application Firewall, all firmware versions.

The FTP Access Logs settings specify general information for logging, including the format of the events being logged and information of the server that will host the Access logs of the FTP application configured on web application firewall.

This option is available under Advanced > Export Logs > FTP Access logs.

The following settings are available:

  • Server IP - Specifies the IP address of the remote server. This server would collect the Access logs. However, it is mandatory that the FTP server should be running on this machine.
  • Server Port - Specifies the port on which the FTP server is running.
    • Range: 1- 65535
    • Default: 21
  • Server User Name - Specifies the user name to login to the FTP server and to export the Access logs. This should be a valid FTP user name that the remote machine accepts for file transfers.
  • Server Password - Specifies the password associated with the user value entered in the 'Server User name' field.
  • Destination Directory Path - Specifies the name of the target directory. This specifies where the logs should be stored. This directory should be created manually in the FTP server, before sending the Access logs.
  • Logs Format - Specifies the format in which the logging should appear.
  • Values: Custom Format, Common Log Format, NCSA Extended Format, W3C Extended Format
    • Default: Common Log Format
  • Logs Custom Format - Specifies the values for the log format. For Custom Format, values need to be specified. For Common Log Format, NCSA Extended Format and W3C Extended Format, values are already defined.
  • Values: The values specified here must include "%" followed by the alphabet. The following are the alphabets and its meaning:
    • %s - HTTP Status
    • %t - Time Stamp
    • %ci - Client IP
    • %cp - Client Port
    • %ai - Application IP
    • %ap - Application Port
    • %si - Server IP
    • %sp - Server Port
    • %m - Method
    • %p - Protocol
    • %u - URL
    • %v - Version
    • %cu - Certificate User
    • %id - Login ID
    • %h - Host
    • %r - Referer
    • %ch - Cache Hit
    • %bs - Bytes Sent
    • %br - Bytes Received
    • %tt - Time Taken
    • %st - Server Time
    • %pf - Protected Field
    • %wmf - WF Matched Field
    • %pmf - Profile Matched Field
    • %rtf - Response Type Field
    • %sid - Session ID
    • %q - Query
    • %c - Cookie
  • Default: The default values for the three standard log formats which cannot be edited are:
    • + Common Log Format - %h %id %u %t %r %s %br
    • + NCSA Extended Format - %h %id %u %t %r %s %br
    • + W3C Extended Format - %t %ci %id %m %cu %q %u %r

Link to this page: