| %S | host (the client hostname, or address of the computer making the request)
|
| %s | numerical IP address of client (if recorded in a separate field; used when %S is empty)
|
| %r | file requested
|
| %q | query string (part of filename after ?, if recorded in a separate field)
|
| %B | browser
|
| %A | browser with +'s instead of spaces
|
| %f | referrer
|
| %u | user (tip: a cookie can usefully be defined as %u too)
|
| %v | virtual host (the server hostname, also called the virtual domain)
|
| %d | day of the month
|
| %m | month in digits
|
| %M | month, three letter English abbreviation
|
| %y | year, last two digits
|
| %Y | year, four digits
|
| %Z | year, two or four digits (less efficient)
|
| %h | hour of the day
|
| %n | minute of the hour
|
| %a | a or A for am, or p or P for pm, if %h is in the 12-hour clock. (So to match "am" you need %am and to match "AM" you need %aM)
|
| %U | "Unix time" (seconds since beginning of 1970, GMT). If it includes decimals, use %U.%j
|
| %b | number of bytes transferred
|
| %t | processing time in seconds
|
| %T | processing time in milliseconds
|
| %D | processing time in microseconds
|
| %c | HTTP status code
|
| %C | code words used instead of HTTP status code in some servers -- only used internally
|
| %j | junk: ignore this field (field can be empty too)
|
| %1 | junk: ignore this field (field can be empty too)
|
| %2 | junk: ignore this field (field can be empty too)
|
| %3 | junk: ignore this field (field can be empty too)
|
| %4 | junk: ignore this field (field can be empty too)
|
| %5 | junk: ignore this field (field can be empty too)
|