W3C FTP server logs
IBM® Sterling Control Center Monitor can monitor FTP servers that produce logs in W3C standard as long as the log adheres to these rules.
- #Fields—Must begin in column 1 and be followed by the file layout key. The following is an
example of #Fields:
#Fields: date time c-ip cs-bytes sc-bytes cs-method sc-status cs-uri-stem - Fields are delimited by blanks.
- Fields cannot contain embedded blanks unless surrounded by single quotes. For example, if
cs-uri-stem has filename with embedded blanks, cs-uri-stem must be surrounded by single quotes. The
following is the example:
#Fields: date time c-ip cs-bytes sc-bytes cs-method sc-status cs-uri-stem 2009-04-07 14:20:56 10.20.201.3 738 0 STOR 226 'DATA FROM CE FTP SERVER' - The date and time fields must be present in the log in the form, YYYY-MM-DD HH:MM:SS. You must set the Time Zone setting for the FTP server to the zone used in log date/time.
- The FTP command must be found in either the cs-method or cs-uri-stem
field. If the FTP is in the cs-method field, use one of the following
forms:
[nn...nnn]cmdor
cmdIf the FTP command is in the cs-uri-stem field, it must be in the following form:
cmd - The status must be in either the sc-win31-status or ws-status
field or else the FTP command will be reported as Return Code=8. The
return code is determined from the sc-win32-status field if it is
present (and not manifested by a - symbol);
otherwise, the return code is determined from the sc-status field.
The following tables summarize how the status of the FTP server can
be manifested in either the sc-win32-status or sc-status field:
- sc-win32-status
- Return Code
- Not in log record
Check sc-status
- -
Check sc-status
- 0
0 which indicates a successful execution
- otherwise
8 which indicates an error occurred
- sc-status
- Return Code
- Not in log record
8 which indicates an error occurred
- -
8 which indicates an error occurred
- 1nn, 2nn, 3nn
0 which indicates a successful execution
- otherwise
8 which indicates an error occurred
Use the alphabetical listing in Keys and Fields to see how the fields in W3C logs are mapped to IBM Sterling Control Center Monitor terms. For example, the value in the Orig Node field in the Statistics Detail display corresponds to the value in the cs-username field if it is present in the log; otherwise, the value in the c-ip field is used.
Time zone for W3C FTP servers
W3C FTP servers support only a certain time zone depending on what operating system you are using. For example, on the Windows operating system, the only time zone that is supported for W3C FTP servers is coordinated universal time (UTC).