# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. coradiant_object_v2 = { plugin_version = "1.0.1" # Initial creation - 1.0 # 2010-10-27 - 1.0.1 - MSG - Edited info lines. info.1.manufacturer = "Coradiant" info.1.device = "TrueSight v2.0" info.1.version.1 = "2.0" # The name of the log format log.format.format_label = "Coradiant TrueSight Log Format (object tracking) v2.0" log.miscellaneous.log_data_type = "firewall" log.miscellaneous.log_format_type = "firewall" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^#x-record-type," log.format.ignore_format_lines = "true" log.format.field_separator = "," # The format of dates and times in this log log.format.date_format = "dd/mmm/yyyy" log.format.time_format = "auto" # Log fields log.fields = { date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time x_record_type = { label = "$lang_stats.field_labels.x_record_type" type = "flat" index = 1 } # x_record_type x_object_id = { label = "$lang_stats.field_labels.x_object_id" type = "flat" index = 2 } # x_object_id x_page_id = { label = "$lang_stats.field_labels.x_page_id" type = "flat" index = 3 } # x_page_id x_session_id = { label = "$lang_stats.field_labels.x_session_id" type = "flat" index = 4 } # x_session_id cs_host = { label = "$lang_stats.field_labels.cs_host" type = "flat" index = 5 } # cs_host cs_uri_stem = { label = "$lang_stats.field_labels.cs_uri_stem" type = "page" index = 6 hierarchy_dividers = "/?" left_to_right = true leading_divider = "true" } # cs_uri_stem cs_uri_query = { label = "$lang_stats.field_labels.cs_uri_query" type = "flat" index = 7 } # cs_uri_query cs_referer = { label = "$lang_stats.field_labels.cs_referer" type = "URL" index = 8 hierarchy_dividers = "/?" left_to_right = true leading_divider = "false" } # cs_referer sc_location = { label = "$lang_stats.field_labels.sc_location" type = "flat" index = 9 } # sc_location x_start_time = { label = "$lang_stats.field_labels.x_start_time" type = "flat" index = 10 } # x_start_time x_end_time = { label = "$lang_stats.field_labels.x_end_time" type = "flat" index = 11 } # x_end_time c_ip = { label = "$lang_stats.field_labels.c_ip" type = "host" index = 12 hierarchy_dividers = "." left_to_right = false leading_divider = "false" } # c_ip c_port = { label = "$lang_stats.field_labels.c_port" type = "flat" index = 13 } # c_port s_ip = { label = "$lang_stats.field_labels.s_ip" type = "flat" index = 14 } # s_ip s_port = { label = "$lang_stats.field_labels.s_port" type = "flat" index = 15 } # s_port sc_bytes = { label = "$lang_stats.field_labels.sc_bytes" type = "flat" index = 16 } # sc_bytes x_throughput = { label = "$lang_stats.field_labels.x_throughput" type = "flat" index = 17 } # x_throughput x_tcp_rtt = { label = "$lang_stats.field_labels.x_tcp_rtt" type = "flat" index = 19 } # x_tcp_rtt x_tcp_ooo = { label = "$lang_stats.field_labels.x_tcp_ooo" type = "flat" index = 20 } # x_tcp_ooo x_tcp_retrx = { label = "$lang_stats.field_labels.x_tcp_retrx" type = "flat" index = 21 } # x_tcp_retrx x_ssl_time = { label = "$lang_stats.field_labels.x_ssl_time" type = "flat" index = 22 } # x_ssl_time x_e2e_time = { label = "$lang_stats.field_labels.x_e2e_time" type = "flat" index = 22 } # x_e2e_time x_process_time = { label = "$lang_stats.field_labels.x_process_time" type = "flat" index = 23 } # x_process_time x_network_time = { label = "$lang_stats.field_labels.x_network_time" type = "flat" index = 24 } # x_network_time cs_method = { label = "$lang_stats.field_labels.cs_method" type = "flat" index = 25 } # cs_method cs_version = { label = "$lang_stats.field_labels.cs_version" type = "flat" index = 26 } # cs_version x_sc_mimetype = { label = "$lang_stats.field_labels.x_sc_mimetype" type = "flat" index = 27 } # x_sc_mimetype sc_status = { label = "$lang_stats.field_labels.sc_status" type = "flat" index = 28 } # sc_status x_redirect = { label = "$lang_stats.field_labels.x_redirect" type = "flat" index = 29 } # x_redirect x_document = { label = "$lang_stats.field_labels.x_document" type = "flat" index = 30 } # x_document x_container = { label = "$lang_stats.field_labels.x_container" type = "flat" index = 31 } # x_container x_component = { label = "$lang_stats.field_labels.x_component" type = "flat" index = 32 } # x_component x_aborted = { label = "$lang_stats.field_labels.x_aborted" type = "flat" index = 33 } # x_aborted x_secure = { label = "$lang_stats.field_labels.x_secure" type = "flat" index = 34 } # x_secure x_timed_out = { label = "$lang_stats.field_labels.x_timed_out" type = "flat" index = 35 } # x_timed_out x_nw_error_count = { label = "$lang_stats.field_labels.x_nw_error_count" type = "flat" index = 36 } # x_nw_error_count x_cl_error_count = { label = "$lang_stats.field_labels.x_cl_error_count" type = "flat" index = 37 } # x_cl_error_count x_sv_error_count = { label = "$lang_stats.field_labels.x_sv_error_count" type = "flat" index = 38 } # x_sv_error_count x_ap_error_count = { label = "$lang_stats.field_labels.x_ap_error_count" type = "flat" index = 39 } # x_ap_error_count x_ct_error_count = { label = "$lang_stats.field_labels.x_ct_error_count" type = "flat" index = 40 } # x_ct_error_count x_cu_error_count = { label = "$lang_stats.field_labels.x_cu_error_count" type = "flat" index = 41 } # x_cu_error_count } # log.fields # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day cs_uri_stem = { label = "$lang_stats.field_labels.cs_uri_stem" log_field = "cs_uri_stem" type = "string" suppress_top = 0 suppress_bottom = 9 } # cs_uri_stem file_type = { label = "$lang_stats.field_labels.file_type" log_field = "file_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # file_type worm = { label = "$lang_stats.field_labels.worm" log_field = "worm" type = "string" suppress_top = 0 suppress_bottom = 2 } # worm # screen_dimensions = { # label = "$lang_stats.field_labels.screen_dimensions" # log_field = "screen_dimensions" # type = "string" # suppress_top = 0 # suppress_bottom = 2 # } # screen_dimensions # screen_depth = { # label = "$lang_stats.field_labels.screen_depth" # log_field = "screen_depth" # type = "string" # suppress_top = 0 # suppress_bottom = 2 # } # screen_depth c_ip = { label = "$lang_stats.field_labels.host" log_field = "c_ip" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hostname" } # c_ip domain_description = { label = "$lang_stats.field_labels.domain_description" log_field = "domain_description" type = "string" suppress_top = 0 suppress_bottom = 2 } # domain_description location = { label = "$lang_stats.field_labels.location" log_field = "location" type = "string" suppress_top = 0 suppress_bottom = 3 } # location cs_referer = { label = "$lang_stats.field_labels.cs_referer" log_field = "cs_referer" type = "string" suppress_top = 1 suppress_bottom = 3 } # cs_referer referrer_description = { label = "$lang_stats.field_labels.referrer_description" log_field = "referrer_description" type = "string" suppress_top = 0 suppress_bottom = 2 } # referrer_description search_engine = { label = "$lang_stats.field_labels.search_engine" log_field = "search_engine" type = "string" suppress_top = 0 suppress_bottom = 2 } # search_engine search_phrase = { label = "$lang_stats.field_labels.search_phrase" log_field = "search_phrase" type = "string" suppress_top = 0 suppress_bottom = 2 } # search_phrase x_record_type = { label = "$lang_stats.field_labels.x_record_type" log_field = "x_record_type" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_record_type x_object_id = { label = "$lang_stats.field_labels.x_object_id" log_field = "x_object_id" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_object_id x_page_id = { label = "$lang_stats.field_labels.x_page_id" log_field = "x_page_id" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_page_id x_session_id = { label = "$lang_stats.field_labels.x_session_id" log_field = "x_session_id" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_session_id cs_host = { label = "$lang_stats.field_labels.cs_host" log_field = "cs_host" type = "string" suppress_top = "0" suppress_bottom = "2" } # cs_host cs_uri_query = { label = "$lang_stats.field_labels.cs_uri_query" log_field = "cs_uri_query" type = "string" suppress_top = "0" suppress_bottom = "2" } # cs_uri_query sc_location = { label = "$lang_stats.field_labels.sc_location" log_field = "sc_location" type = "string" suppress_top = "0" suppress_bottom = "2" } # sc_location c_ip = { label = "$lang_stats.field_labels.c_ip" log_field = "c_ip" type = "string" suppress_top = "0" suppress_bottom = "2" } # c_ip c_port = { label = "$lang_stats.field_labels.c_port" log_field = "c_port" type = "string" suppress_top = "0" suppress_bottom = "2" } # c_port s_ip = { label = "$lang_stats.field_labels.s_ip" log_field = "s_ip" type = "string" suppress_top = "0" suppress_bottom = "2" } # s_ip s_port = { label = "$lang_stats.field_labels.s_port" log_field = "s_port" type = "string" suppress_top = "0" suppress_bottom = "2" } # s_port cs_method = { label = "$lang_stats.field_labels.cs_method" log_field = "cs_method" type = "string" suppress_top = "0" suppress_bottom = "2" } # cs_method cs_version = { label = "$lang_stats.field_labels.cs_version" log_field = "cs_version" type = "string" suppress_top = "0" suppress_bottom = "2" } # cs_version x_sc_mimetype = { label = "$lang_stats.field_labels.x_sc_mimetype" log_field = "x_sc_mimetype" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_sc_mimetype sc_status = { label = "$lang_stats.field_labels.sc_status" log_field = "sc_status" type = "string" suppress_top = "0" suppress_bottom = "2" } # sc_status x_redirect = { label = "$lang_stats.field_labels.x_redirect" log_field = "x_redirect" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_redirect x_document = { label = "$lang_stats.field_labels.x_document" log_field = "x_document" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_document x_container = { label = "$lang_stats.field_labels.x_container" log_field = "x_container" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_container x_component = { label = "$lang_stats.field_labels.x_component" log_field = "x_component" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_component x_aborted = { label = "$lang_stats.field_labels.x_aborted" log_field = "x_aborted" type = "string" suppress_top = "0" suppress_bottom = "2" } # x_aborted } # database.fields # Log Parsing Filters log.parsing_filters = { adjust_date = { label = "adjust date" comment = "" value = " if (length(x_start_time) > 3) then ( date = normalize_date(substr(x_start_time, 0, 10), 'auto'); time = normalize_time(substr(x_start_time, 11, 8), 'auto'); ) " } # adjust_date } # log.parsing_filters # Get search engine and search phrase information from the referrer field (before it gets simplified). log.parsing_filters.compute_se_sp = ` if (get_search_engine_info(cs_referer)) then ( search_engine = volatile.search_engine; search_phrase = volatile.search_phrase; ); ` # Log Filters log.filters = { simplify_url = { label = "$lang_admin.log_filters.simplify_url_label" comment = "$lang_admin.log_filters.simplify_url_comment" value = "if (matches_regular_expression(cs_uri_stem, '^([^:]+://[^/]+/)')) then cs_uri_stem = $1 . '(omitted)'" } # simplify_url only_page = { label = "only page" comment = "only page" value = "if (cs_referer eq '-') then cs_referer = '(no cs_referer)';" } # no_referrer simplify_referrer = { label = "$lang_admin.log_filters.simplify_referrer_label" comment = "$lang_admin.log_filters.simplify_referrer_comment" value = "if (cs_referer eq '-') then cs_referer = '(no referrer)' else if (matches_regular_expression(cs_referer, '^([^:]+://[^/]+/)')) then cs_referer = $1 . '(omitted)'" } # simplify_referrer internal_referrer = { label = "$lang_admin.log_filters.internal_referrer_label" comment = "$lang_admin.log_filters.internal_referrer_comment" value = "if (contains(cs_referer, 'mydomain.com/')) then cs_referer = '(internal referrer)';" disabled = true } # internal_referrer set_page_for_worm = { label = "$lang_admin.log_filters.set_page_for_worm_label" comment = "$lang_admin.log_filters.set_page_for_worm_comment" value = "if (starts_with(worm, '(')) then '' else cs_uri_stem = '(worm)';" } # set_page_for_worm # remove_query = { # label = "$lang_admin.log_filters.remove_query_label" # comment = "$lang_admin.log_filters.remove_query_comment" # value = "if (contains(page, '?')) then page = substr(page, 0, index(page, '?') + 1) . '(parameters)';" # } # remove_query detect_page_views = { label = '$lang_admin.log_filters.detect_page_views_label' comment = '$lang_admin.log_filters.detect_page_views_comment' value = "if ((file_type eq 'JPEG') or (file_type eq 'JPG') or (file_type eq 'GIF') or (file_type eq 'ICO') or (file_type eq 'PNG') or (file_type eq 'CSS') or (file_type eq 'SWF') or (file_type eq 'JS')) then page_views = 0; else page_views = 1;" } # detect_page_views strip_non_page_views = { label = '$lang_admin.log_filters.strip_non_page_views_label' comment = '$lang_admin.log_filters.strip_non_page_views_comment' value = "if (page_views == 0) then cs_uri_stem = substr(cs_uri_stem, 0, last_index(cs_uri_stem, '/') + 1) . '(nonpage)';" } # strip_non_page_views mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'events = 1;' } # mark_entry } # log.filters log.field_options = { sessions_page_field = "cs_uri_stem" sessions_visitor_id_field = "c_ip" sessions_event_field = "page_views" } # log.field_options database.numerical_fields = { events = { label = "$lang_stats.field_labels.events" default = false requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # events page_views = { label = "$lang_stats.field_labels.page_views" default = true requires_log_field = false type = "int" display_format_type = "integer" } # page_views unique_client_ips = { label = "$lang_stats.field_labels.unique_client_ips" default = false requires_log_field = true log_field = "c_ip" type = "unique" display_format_type = "integer" } # unique_client_ips sc_bytes = { label = "$lang_stats.field_labels.sc_bytes" default = false requires_log_field = true log_field = "sc_bytes" type = "float" display_format_type = "bandwidth" } # sc_bytes x_throughput = { label = "$lang_stats.field_labels.x_throughput" default = false requires_log_field = true log_field = "x_throughput" type = "float" display_format_type = "integer" } # x_throughput average_x_throughput = { label = "$lang_stats.field_labels.x_throughput $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_throughput" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_throughput x_tcp_rtt = { label = "$lang_stats.field_labels.x_tcp_rtt" default = false requires_log_field = true log_field = "x_tcp_rtt" type = "float" display_format_type = "integer" } # x_tcp_rtt average_x_tcp_rtt = { label = "$lang_stats.field_labels.x_tcp_rtt $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_tcp_rtt" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_tcp_rtt x_tcp_ooo = { label = "$lang_stats.field_labels.x_tcp_ooo" default = false requires_log_field = true log_field = "x_tcp_ooo" type = "float" display_format_type = "integer" } # x_tcp_ooo average_x_tcp_ooo = { label = "$lang_stats.field_labels.x_tcp_ooo $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_tcp_ooo" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_tcp_ooo x_tcp_retrx = { label = "$lang_stats.field_labels.x_tcp_retrx" default = false requires_log_field = true log_field = "x_tcp_retrx" type = "float" display_format_type = "integer" } # x_tcp_retrx average_x_tcp_retrx = { label = "$lang_stats.field_labels.x_tcp_retrx $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_tcp_retrx" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_tcp_retrx x_ssl_time = { label = "$lang_stats.field_labels.x_ssl_time" default = false requires_log_field = true log_field = "x_ssl_time" type = "float" display_format_type = "integer" } # x_ssl_time average_x_ssl_time = { label = "$lang_stats.field_labels.x_ssl_time $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_ssl_time" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_ssl_time x_e2e_time = { label = "$lang_stats.field_labels.x_e2e_time" default = false requires_log_field = true log_field = "x_e2e_time" type = "float" display_format_type = "integer" } # x_e2e_time average_x_e2e_time = { label = "$lang_stats.field_labels.x_e2e_time $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_e2e_time" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_e2e_time x_process_time = { label = "$lang_stats.field_labels.x_process_time" default = false requires_log_field = true log_field = "x_process_time" type = "float" display_format_type = "integer" } # x_process_time average_x_process_time = { label = "$lang_stats.field_labels.x_process_time $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_process_time" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_process_time x_network_time = { label = "$lang_stats.field_labels.x_network_time" default = false requires_log_field = true log_field = "x_network_time" type = "float" display_format_type = "integer" } # x_network_time average_x_network_time = { label = "$lang_stats.field_labels.x_network_time $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_network_time" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_network_time x_nw_error_count = { label = "$lang_stats.field_labels.x_nw_error_count" default = false requires_log_field = true log_field = "x_nw_error_count" type = "float" display_format_type = "integer" } # x_nw_error_count average_x_nw_error_count = { label = "$lang_stats.field_labels.x_nw_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_nw_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_nw_error_count x_cl_error_count = { label = "$lang_stats.field_labels.x_cl_error_count" default = false requires_log_field = true log_field = "x_cl_error_count" type = "float" display_format_type = "integer" } # x_cl_error_count average_x_cl_error_count = { label = "$lang_stats.field_labels.x_cl_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_cl_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_cl_error_count x_sv_error_count = { label = "$lang_stats.field_labels.x_sv_error_count" default = false requires_log_field = true log_field = "x_sv_error_count" type = "float" display_format_type = "integer" } # x_sv_error_count average_x_sv_error_count = { label = "$lang_stats.field_labels.x_sv_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_sv_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_sv_error_count x_ap_error_count = { label = "$lang_stats.field_labels.x_ap_error_count" default = false requires_log_field = true log_field = "x_ap_error_count" type = "float" display_format_type = "integer" } # x_ap_error_count average_x_ap_error_count = { label = "$lang_stats.field_labels.x_ap_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_ap_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_ap_error_count x_timed_out = { label = "$lang_stats.field_labels.x_timed_out" default = false requires_log_field = true log_field = "x_timed_out" type = "float" display_format_type = "integer" } # x_timed_out average_x_timed_out = { label = "$lang_stats.field_labels.x_timed_out $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_timed_out" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_timed_out x_ct_error_count = { label = "$lang_stats.field_labels.x_ct_error_count" default = false requires_log_field = true log_field = "x_ct_error_count" type = "float" display_format_type = "integer" } # x_ct_error_count average_x_ct_error_count = { label = "$lang_stats.field_labels.x_ct_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_ct_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_ct_error_count x_cu_error_count = { label = "$lang_stats.field_labels.x_cu_error_count" default = false requires_log_field = true log_field = "x_cu_error_count" type = "float" display_format_type = "integer" } # x_cu_error_count average_x_cu_error_count = { label = "$lang_stats.field_labels.x_cu_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_cu_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_cu_error_count x_ct_error_count = { label = "$lang_stats.field_labels.x_ct_error_count" default = false requires_log_field = true log_field = "x_ct_error_count" type = "float" display_format_type = "integer" } # x_ct_error_count average_x_ct_error_count = { label = "$lang_stats.field_labels.x_ct_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_ct_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_ct_error_count x_cu_error_count = { label = "$lang_stats.field_labels.x_cu_error_count" default = false requires_log_field = true log_field = "x_cu_error_count" type = "float" display_format_type = "integer" } # x_cu_error_count average_x_cu_error_count = { label = "$lang_stats.field_labels.x_cu_error_count $lang_stats.field_labels.average_tag" default = false requires_log_field = true log_field = "x_cu_error_count" type = "float" display_format_type = "integer" aggregation_method = "average" average_denominator_field = "events" } # average_x_cu_error_count } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true host_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" content_group = { cs_uri_stem = true cs_uri_query = true file_type = true x_sc_mimetype = true x_document = true x_component = true } visitor_demographics_group = { c_ip = true domain_description = true location = true c_port = true } visitor_systems_group = { web_browser = true operating_system = true } referrer_group = { cs_referer = true referrer_description = true search_engine = true search_phrase = true search_phrase_by_search_engine = true } server_group = { s_ip = true s_port = true cs_host = true } other_group = { worm = true spider = true sc_status = true sc_method = true cs_version = true x_container = true sc_location = true x_record_type = true x_object_id = true x_session_id = true x_page_id = true cs_method = true x_redirect = true x_aborted = true } } # report_groups } # create_profile_wizard_options not_supported = { } # not_supported } # coradiant_object_v2