NCSA Input Format

The NCSA input format parses log files in the NCSA Common, Combined, and Extended Log File Formats.

The NCSA Log File Format is a text-based, fixed-field format. Log entries are logged on a single line, consisting of a space-separated list of field values.
There are three versions of the NCSA Log File Format: "Common", "Combined", and "Extended". The three versions differ by the number of fields that are logged for each request.
IIS can log NCSA Common Log File Format log files, while other web servers can be configured to log with the Combined and Extended formats.

The following example shows a portion of an NCSA Common Log File Format log file:

172.21.13.45 - Microsoft\User [08/Apr/2001:17:39:04 -0800] "GET /scripts/iisadmin/ism.dll?http/serv HTTP/1.0" 200 3401
172.21.201.112 - - [08/Apr/2001:21:01:19 -0800] "GET /style.css HTTP/1.0" 200 3401

The following example shows a portion of an NCSA Combined Log File Format log file:

172.21.13.45 - Microsoft\User [08/Apr/2001:17:39:04 -0800] "GET /scripts/iisadmin/ism.dll?http/serv HTTP/1.0" 200 3401 "http://www.microsoft.com/" "Mozilla/4.05 [en] (WinNT; I)" "USERID=CustomerA"
172.21.201.112 - - [08/Apr/2001:21:01:19 -0800] "GET /style.css HTTP/1.0" 200 1937 "http://www.microsoft.com/" "Mozilla/4.05 [en] (WinNT; I)" "USERID=CustomerA"

From-Entity Syntax
Fields
Parameters
Examples