Logging Results - Export

This section describes the fields that are in an export file, as exported from the [Domain] > AUDIT > Logging > Results module.

 

The [Domain] > AUDIT > Logging > Search module lets you specify search criteria to filter log records based on what data would like to see. The results of the search criteria is accessible via the [Domain] > AUDIT > Logging > Results tab.  In the Results module, you can export your search results. Below you will find an image that provides a snippet from an exported search > result file.

 

 

The fields outlined in the above image are described in the chart below.

 

Field Name Description
date Event Date
time Event Time (UTC, with milliseconds)
c-ip Client's IP Address
c-port Client's Source Port (Ephemeral)
s-ip Server's IP Address
s-port Server's Service Port
cs-username Authenticated Username
cs-method Client Method
cs-uri-stem Client Target Path
sc-status Server Status Description
sc-message Server Message (Filename & Details)
cs-bytes Bytes Sent by Client (Upload Size)
sc-bytes Bytes Sent by Server
session-id Unique Session Identifier
app-instance-id Unique Server Instance Identifier

 

Below is an example of a record as outlined in the export file. It provides information about User2 activity, when the User uploaded a file to MFT Server. See the field names and their associated values for the record outlined in the export file below.

 

 

  • date: (date of logged event) 2025-07-16

  • time: (time of logged even) 2:37:57:207

  • c-ip: (client ip) [0:0:0:0:0:0:0:1] Note: This address means that the connection originated from the local (MFT Server) machine itself.

  • c-port: (client port) 63542

  • s-ip: (server IP) [0:0:0:0:0:0:0:1]

  • s-port: (server port) 8080

  • cs-username: (client user name) User2

  • cs-method: (client method) - The dash means there is no data applicable to this field

  • cs-uri-stem: (client target path) - The dash means there is no data applicable to this field

  • sc-status: (server status description) file uploaded

  • sc-message: (server message) /audio1030296870.m4a;74;222082418 (this is the file uploaded)

  • cs-bytes: (bytes sent by client) 16434099 (this is the size of the uploaded file)

  • sc-bytes: (bytes sent by server) - The dash means there is no data applicable to this field

  • session-id (session Identifier) fb7ffb49-6781-43b5-869c-625d1d3ca1ef

  • app-instance-id (Server instance identifier) d5591e0b-36af-4262-8024-1bc220c61ba6