I'm trying to make sense of our QTSS access logs, and I'm confused
about a couple things. (1) The log has records in which c-status =
200 and x-duration is nonzero, for example:
x-duration c-status
109 200
37 200
That means those people connected for 109 and 37 seconds, right? But
the weird thing is, those records seem to indicate that nothing was
sent by the server:
sc-bytes s-pkts-sent
0 0
0 0
So what happened there?
(2) What does c-status = 504 really mean? Sometimes in that case
sc-bytes = s-pkts-sent = 0, but sometimes sc-bytes and s-pkts-sent >
0.
The underlying question is which connections to count as "hits". If I
go by c-status, I'd count 200 but not 504, but I'd get some of those
sc-bytes = s-pkts-sent = 0 records. If I go by sc-bytes and
s-pkts-sent > 0, then I'd get some of those 504 records.
Thanks,
Bob
PS: BTW, the only log format explanation I've seen is the one at: