Observability

Log Service
- Overview
- Real-time Logs
  - Real-time Logs Overview
  - Push to Tencent Cloud CLS
  - Push to AWS S3-Compatible COS
  - Push to HTTP Server
- Offline Logs
- Related References
  - Field description
    - L7 Access Logs
    - L4 Proxy Logs
  - Real-Time Log Push Filter Conditions
  - Custom Log Push Fields
Data Analysis
- Overview
- Traffic Analysis
- Cache Analysis
- Security Analysis
  - Site Security Overview
  - Web Security Analysis
- L4 Proxy
- DNS Resolution
- Related References
  - How to use filter condition
  - How to Modify Query Time Range
  - How to Export Statistical Data and Reports
AlarmService
- Custom Statistical Metrics

L4 Proxy Logs

The following are detailed descriptions for the fields in L4 proxy logs.
Note:
In a long TCP connection scenario, EdgeOne records logs periodically and the last log entry is recorded when the connection ends. You can judge the connection status by checking whether the DisconnetReason field is empty. Additionally, you can use the SessionID to identify the connection. The logs with the same SessionID record the actions of the same connection.
Under the L4 Proxy Logs type, real-time logs and offline logs record the same fields.
Field Name
Data Type
Description
ClientRealIP
String
Real IP address of the client.
ClientRegion
String
2-letter country/region code of the client, compliant with ISO-3166 alpha-2 standard.
ConnectTimeStamp
Timestamp ISO8601
Connection time, UTC +0 time zone by default.
DisconnetReason
String
Disconnection reason. If not disconnected during the current log cycle, the value is -.
The format is Direction: Reason.
Valid values for the direction include:
up: origin server direction
down: client direction
Valid values for the reason include:
net_exception_peer_error: Read/Write peer error.
net_exception_peer_close: The peer has closed connection.
create_peer_channel_exception: Failed to create a channel to the next hop.
channel_eof_exception: Channel has ended (when the request ends, the node ending the request will send channel_eof to the adjacent node, informing it that the request has ended).
net_exception_closed: Connection has closed.
net_exception_timeout: Read/Write timed out.
DisconnetTimeStamp
Timestamp ISO8601
Disconnection time, UTC +0 time zone by default. If not disconnected during the current log cycle, the value is -.
EdgeIP
String
IP address of the accessed EdgeOne server.
ForwardPort
Integer
Customer-configured forwarding port.
ForwardProtocol
String
Customer-configured forwarding protocol TCP/UDP.
LogTimeStamp
Timestamp ISO8601
Log generation time, UTC +0 timezone by default.
ReceivedBytes
Integer
Outbound traffic generated from the recording time of the previous log entry to the recording time of this log entry, in bytes.
SentBytes
Integer
Inbound traffic generated from the recording time of the previous log entry to the recording time of this log entry, in bytes.
ServiceID
String
Unique identifier ID of the L4 proxy service.
SessionID
String
Unique identifier ID of the TCP connection or UDP session.
﻿
﻿

Field Name	Data Type	Description
ClientRealIP	String	Real IP address of the client.
ClientRegion	String	2-letter country/region code of the client, compliant with ISO-3166 alpha-2 standard.
ConnectTimeStamp	Timestamp ISO8601	Connection time, UTC +0 time zone by default.
DisconnetReason	String	Disconnection reason. If not disconnected during the current log cycle, the value is -. The format is Direction: Reason. Valid values for the direction include: up: origin server direction down: client direction Valid values for the reason include: net_exception_peer_error: Read/Write peer error. net_exception_peer_close: The peer has closed connection. create_peer_channel_exception: Failed to create a channel to the next hop. channel_eof_exception: Channel has ended (when the request ends, the node ending the request will send channel_eof to the adjacent node, informing it that the request has ended). net_exception_closed: Connection has closed. net_exception_timeout: Read/Write timed out.
DisconnetTimeStamp	Timestamp ISO8601	Disconnection time, UTC +0 time zone by default. If not disconnected during the current log cycle, the value is -.
EdgeIP	String	IP address of the accessed EdgeOne server.
ForwardPort	Integer	Customer-configured forwarding port.
ForwardProtocol	String	Customer-configured forwarding protocol TCP/UDP.
LogTimeStamp	Timestamp ISO8601	Log generation time, UTC +0 timezone by default.
ReceivedBytes	Integer	Outbound traffic generated from the recording time of the previous log entry to the recording time of this log entry, in bytes.
SentBytes	Integer	Inbound traffic generated from the recording time of the previous log entry to the recording time of this log entry, in bytes.
ServiceID	String	Unique identifier ID of the L4 proxy service.
SessionID	String	Unique identifier ID of the TCP connection or UDP session.