Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Creating Extra Custom Format Key-value Pairs

 

Use the Extended Log File Format (ELFF) custom format to forward specific Blue Coat data or events to JSA.

The custom format is a series of pipe-delimited fields that start with the Bluecoat| field and contains the $(Blue Coat ELFF) parameter.

For example:

Table 1: Custom Format Examples

Blue Coat ELFF Parameter

JSA Custom Format Example

sc-bytes

$(sc-bytes)

rs(Content-type)

$(rs(Content-Type))

For more information about available Blue Coat ELFF parameters, see your Blue Coat appliance documentation.