How to filter data in Reporter by source ProxySG appliance
search cancel

How to filter data in Reporter by source ProxySG appliance


Article ID: 165496


Updated On:


Reporter ProxySG Software - SGOS


The deployment consists of more than a single ProxySG appliance sending access logs to the Reporter server, but these Log Sources all feed into the same database. Can I identify what data came from what ProxySG appliance?



  1. Run the report.
  2. Click Report Options.
  3. Click Add Criteria and select Log Source. You must click the More Fields drop-down to see it.
  4. On the drop down after you select "IS" which filters on a list of all ProxySG IP addresses.

Where in the access log is this information found?

This information is reported on the header of each access log, per the following sample

  • #Software: SGOS
  • #Version: 1.0
  • #Start-Date: 2008-12-31 23:51:02
  • #Date: 2008-12-29 16:59:46
  • #Fields: date time time-taken c-ip cs-username cs-auth-group x-exception-id sc-filter-result cs-categories cs(Referer) sc-status s-action cs-method rs(Content-Type) cs-uri-scheme cs-host cs-uri-port cs-uri-path cs-uri-query cs-uri-extension cs(User-Agent) s-ip sc-bytes cs-bytes x-virus-id
  • #Remark: 1507060048 "home 200 yo" "" "main"
  • 2008-12-31 23:52:04 120 - - - OBSERVED "Email"  200 TCP_NC_MISS GET text/xml;%20charset=UTF-8 http


 NOTE  The above IP address is the primary address on the box, which is the lowest numbered interface. Therefor, if interface 0:0 has an IP address configured, this is the address it would choose.