normally maintains three log files: <i>access_log</i> to track requests that are submitted to the scheduler, <i>error_log</i> to track progress and errors, and <i>page_log</i> to track pages that are printed.
The <i>host</i> field will normally only be an IP address unless you have enabled the HostNameLookups directive in the <i>cupsd.conf</i> file or if the IP address corresponds to your local machine.
<p>The <i>group</i> field always contains "-".
<p>The <i>user</i> field is the authenticated username of the requesting user.
If no username and password is supplied for the request then this field contains "-".
<p>The <i>date-time</i> field is the date and time of the request in local time and is in the format "[DD/MON/YYYY:HH:MM:SS +ZZZZ]".
<p>The <i>method</i> field is the HTTP method used: "GET", "HEAD", "OPTIONS", "POST", or "PUT".
"GET" requests are used to get files from the server, both for the web interface and to get configuration and log files.
"HEAD" requests are used to get information about a resource prior to a "GET".
"OPTIONS" requests are used to upgrade connections to TLS encryption.
"POST" requests are used for web interface forms and IPP requests.
"PUT" requests are used to upload configuration files.
<p>The <i>resource</i> field is the filename of the requested resource.
<p>The <i>version</i> field is the HTTP specification version used by the client.
For CUPS clients this will always be "HTTP/1.1".
<p>The <i>status</i> field contains the HTTP result status of the request, as follows:
<ddstyle="margin-left: 5.0em">The requested file has not changed.
<dt>400
<ddstyle="margin-left: 5.0em">Bad HTTP request; typically this means that you have a malicious program trying to access your server.
<dt>401
<ddstyle="margin-left: 5.0em">Unauthorized, authentication (username + password) is required.
<dt>403
<ddstyle="margin-left: 5.0em">Access is forbidden; typically this means that a client tried to access a file or resource they do not have permission to access.
<dt>404
<ddstyle="margin-left: 5.0em">The file or resource does not exist.
<dt>405
<ddstyle="margin-left: 5.0em">URL access method is not allowed; typically this means you have a web browser using your server as a proxy.
<dt>413
<ddstyle="margin-left: 5.0em">Request too large; typically this means that a client tried to print a file larger than the MaxRequestSize allows.
<dt>426
<ddstyle="margin-left: 5.0em">Upgrading to TLS-encrypted connection.
<dt>500
<ddstyle="margin-left: 5.0em">Server error; typically this happens when the server is unable to open/create a file - consult the error_log file for details.
<dt>501
<ddstyle="margin-left: 5.0em">The client requested encryption but encryption support is not enabled/compiled in.
<dt>505
<ddstyle="margin-left: 5.0em">HTTP version number not supported; typically this means that you have a malicious program trying to access your server.
</div>
</dl>
<p>The <i>bytes</i> field contains the number of bytes in the request.
For POST requests the bytes field contains the number of bytes of non-IPP data that is received from the client.
<p>The <i>ipp-operation</i> field contains either "-" for non-IPP requests or the IPP operation name for POST requests containing an IPP request.
<p>The <i>ipp-status</i> field contains either "-" for non-IPP requests or the IPP status code name for POST requests containing an IPP response.
<p>The <i>date-time</i> field contains the date and time of when the page started printing. The format of this field is identical to the data-time field in the <i>access_log</i> file.
<p>The <i>message</i> field contains a free-form textual message.
Messages from job filters are prefixed with "[Job NNN]" where "NNN" is the job ID.
<p>The <i>printer</i> field contains the name of the printer that printed the page.
If you send a job to a printer class, this field will contain the name of the printer that was assigned the job.
<p>The <i>user</i> field contains the name of the user (the IPP requesting-user-name attribute) that submitted this file for printing.
<p>The <i>job-id</i> field contains the job number of the page being printed.
<p>The <i>date-time</i> field contains the date and time of when the page started printing.
The format of this field is identical to the data-time field in the <i>access_log</i> file.
<p>The <i>num-sheets</i> field provides the total number of pages (sheets) that have been printed on for the job.
<p>The <i>job-billing</i> field contains a copy of the job-billing or job-account-id attributes provided with the IPP Create-Job or Print-Job requests or "-" if neither was provided.
<p>The <i>job-originating-host-name</i> field contains the hostname or IP address of the client that printed the job.
<p>The <i>job-name</i> field contains a copy of the job-name attribute provided with the IPP Create-Job or Print-Job requests or "-" if none was provided.
<p>The <i>media</i> field contains a copy of the media or media-col/media-size attribute provided with the IPP Create-Job or Print-Job requests or "-" if none was provided.
<p>The <i>sides</i> field contains a copy of the sides attribute provided with the IPP Create-Job or Print-Job requests or "-" if none was provided.
