自定义apache日志格式

sudo vi /etc/apache2/apache2.conf

通过LogFormat和CustomLog指令可以实现自定义日志文件格式和内容的目的。
看到stackoverflow上有人问这个问题，可以在配置文件上加上这个。

LoadModule log_forensic_module /usr/lib64/apache2/modules/mod_log_forensic.so 
<IfModule log_forensic_module> 
ForensicLog /var/log/apache2/forensic_log 
</IfModule> 

然而后来发现其实没这个必要，很多不必要的信息，占用空间。

+1197:590aadca:0|GET /netease.js HTTP/1.1|Host:123.20x.xxx.xxx%3a8087|Upgrade-Insecure-Requests:1|Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8|User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.1 Safari/603.1.30|Accept-Language:zh-cn|Accept-Encoding:gzip, deflate|Connection:keep-alive
-1197:590aadca:0

其实在默认的基础上加一个Cookie字段就够了。
编辑好配置文件/etc/apache2/apache2.conf之后，重启apache2服务。

sudo systemctl restart apache2

然后再查看日志/var/log/apache2/access.log

192.168.170.1 - - [04/May/2017:12:38:33 +0800] "GET /wordpress/ HTTP/1.1" 200 5418 "http://192.168.170.131/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3088.0 Safari/537.36" "wordpress_test_cookie=WP+Cookie+check; wordpress_logged_in_cac14356fc8680e349a2608b4ccfec17=77caikiki%7C1495076437%7CM4orkZfegC9fOQEWmmdPsq3aqgh1lOKlqsCcfOAH83F%7C2b6ab7b878a5b4ee7454f120eeca8cd2d6702d790455dccb8b43a6f271b0e9a9; wp-settings-time-1=1493866861"
192.168.170.1 - - [04/May/2017:12:38:33 +0800] "GET /wordpress/wp-content/themes/twentysixteen/genericons/genericons.css?ver=3.4.1 HTTP/1.1" 200 16780 "http://192.168.170.131/wordpress/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3088.0 Safari/537.36" "wordpress_test_cookie=WP+Cookie+check; wordpress_logged_in_cac14356fc8680e349a2608b4ccfec17=77caikiki%7C1495076437%7CM4orkZfegC9fOQEWmmdPsq3aqgh1lOKlqsCcfOAH83F%7C2b6ab7b878a5b4ee7454f120eeca8cd2d6702d790455dccb8b43a6f271b0e9a9; wp-settings-time-1=1493866861"
192.168.170.1 - - [04/May/2017:12:38:33 +0800] "GET /wordpress/wp-includes/css/admin-bar.min.css?ver=4.6.5 HTTP/1.1" 200 4203 "http://192.168.170.131/wordpress/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3088.0 Safari/537.36" "wordpress_test_cookie=WP+Cookie+check; wordpress_logged_in_cac14356fc8680e349a2608b4ccfec17=77caikiki%7C1495076437%7CM4orkZfegC9fOQEWmmdPsq3aqgh1lOKlqsCcfOAH83F%7C2b6ab7b878a5b4ee7454f120eeca8cd2d6702d790455dccb8b43a6f271b0e9a9; wp-settings-time-1=1493866861"

如果没有Cookie的话，会在那个位置填上-。如

223.xxx.xx.x - - [04/May/2017:12:36:22 +0800] "GET /netease.js HTTP/1.1" 200 884 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.1 Safari/603.1.30" "-"