CDN Access Log_Operation Guide_로그 서비스 플랫폼-Documentation

This article provides an overview of CDN access logs within the platform’s native data, as well as detailed explanations of each log field.

Basic

No.	Field Name	Field Code	Data Type	Field Description
1	Log Version	log_version	LONG	Used to indicate the version information of the log.
2	Log Sampling Rate	log_sampling_rate	INT	A value of `N` indicates that one real-time log entry will be generated for every `N` requests.
3	Content Code	content_code	STRING	An identifier used to classify different requests. It can be used for categorized reporting, billing, and request processing.
4	Acceleration Domain	hostname	STRING	The hostname on the acceleration platform configured to serve the request. If the acceleration domain is a wildcard domain, the log entry begins with a ‘.’.
5	Request ID	request_id	STRING	A unique identifier for the request, globally unique within the platform. Useful for debugging.
6	Log Timestamp (ms)	log_timestamp_ms	LONG	The timestamp in milliseconds when this log was generated.

Client

No.	Field Name	Field Code	Data Type	Field Description
1	Real Client IP	client_real_ip	STRING	The real client IP. Preferentially taken from the Cdn-Src-Ip header; if unavailable, the value from remote-ip is used.
2	Real Client Port	client_real_port	INT	The real client port. Preferentially taken from the Cdn-Src-Port header; if unavailable, the value from remote-port is used.
3	Connection Client IP	client_ip	STRING	The client IP that establishes the TCP connection with the acceleration node. Obtained from remote-ip.
4	Connection Client Port	client_port	INT	The destination port used by the client for TCP connection to the acceleration node. Extracted from remote-port.
5	HTTP Authentication Username	client_remote_auth_user	STRING	The HTTP basic authentication username, extracted from the Authorization request header.
6	Real Client IP Version	client_ip_version	INT	The IP protocol version of the client IP. `4` indicates IPv4, and `6` indicates IPv6.
7	Real Client Continent	client_continent	STRING	The continent to which the client IP belongs. Supports both Chinese and English.
8	Real Client Country or Region	client_country	STRING	The country (e.g., United States, China, Russia) or region (e.g., Mainland China, Hong Kong, Macau, Taiwan) associated with the client IP. Supports code, Chinese, and English. For codes, the ISO 3166 two-letter standard is used.
9	Real Client Region (Province/State)	client_region	STRING	The region associated with the client IP, such as provinces in mainland China or states in the United States. Supports both code and Chinese. For codes, the ISO 3166 two-letter standard is used.
10	Real Client ISP	client_isp	STRING	The ISP to which the client IP belongs. Supports both Chinese and English.
11	Real Client Latitude	client_latitude	STRING	The latitude associated with the client IP.
12	Real Client Longitude	client_longitude	STRING	The longitude associated with the client IP.
13	Client User Agent	client_user_agent	STRING	The value of the `User-Agent` request header.
14	Client Browser Name	client_browser	STRING	The name of the client’s browser, extracted from the `User-Agent` header in the request.
15	Client Device Name	client_device	STRING	The name of the client’s device, extracted from the `User-Agent` header in the request.
16	Client Operating System Name	client_os	STRING	The name of the client’s operating system, extracted from the `User-Agent` header in the request.

Request

No.	Field Name	Field Code	Data Type	Field Description
1	Request Start Time (ms)	request_timestamp_ms	LONG	The millisecond-level timestamp of the first byte of the client request received by the node, representing the start time of the request.
2	SNI Hostname	request_tls_server_name	STRING	The Server Name carried in the SNI of the TLS handshake packet requested by the client.
3	SSL Protocol Version	request_ssl_protocol	STRING	The SSL/TLS protocol version for the connection. Includes: SSLv3, TLSv1, TLSv1.1, TLSv1.2, TLSv1.3.
4	SSL Reuse Indicator	request_ssl_reuse	INT	Flag indicating whether the SSL/TLS session for the client request is reused. `1` means reused, `0` means not reused.
5	Request HOST	request_host	STRING	The value of the `Host` request header from the client. Note: If the request port is not 80 or 443, the port number will be included in this field.
6	HTTP Protocol Version	request_http_protocol	STRING	The HTTP protocol version used by the client request, e.g., HTTP/1.0, HTTP/1.1, HTTP/2.0, HTTP/3.0.
7	Request Protocol Scheme	request_scheme	STRING	The protocol scheme used in the client request, including: `http`, `https`.
8	Request Method	request_method	STRING	The HTTP method of the client request, e.g., GET, POST, PUT, DELETE, PATCH, HEAD, OPTION, etc.
9	Request URL	request_url	STRING	The complete URL requested by the client.
10	Request URL Full Query String	request_url_query_string	STRING	The complete set of query parameters attached to the request URL. Note: Does not start with a question mark. For example: `deviceFamily=iPhone&domain=apps,books&storefrontId=143465&userId=16694213637`.
11	Request URI Path	request_url_path	STRING	The requested URI path, excluding query parameters. Begins with ‘/’.
12	Request Header Referer	request_referer	STRING	The value of the `Referer` request header from the client.
13	Request Header Content-Type	request_content_type	STRING	The value of the `Content-Type` request header from the client request.
14	Request Header Range	request_range	STRING	The value of the `Range` request header from the client request.
15	Request Size	request_bytes	LONG	The traffic size of the request, including the request line, headers, and body. Unit: bytes.
16	Request Header Size	request_header_bytes	LONG	The traffic size of the request headers, including the request line and headers, excluding the body. Unit: bytes.
17	Request Delivery Rate	request_tcp_delivery_rate	LONG	The data transmission rate for this request as measured by the TCP stack. Unit: bytes/second.
18	Minimum Request RTT	request_tcp_min_rtt	LONG	The minimum RTT for this request as measured by the TCP stack. Unit: microseconds.
19	Average Request RTT	request_tcp_rtt	LONG	The average RTT for this request as measured by the TCP stack. Unit: microseconds.
20	First Request on TCP Connection	request_tcp_initial_request	INT	Indicates whether this request is the first one on the current TCP connection. `1` means it is the first request, `0` means it is not.
21	Request Receive Duration	request_receive_duration	DOUBLE	The time it takes to fully receive the client request, i.e., the duration from the node receiving the first byte of the client’s request to the point it is ready to process or forward it. Unit: seconds.

EdgeServer

No.	Field Name	Field Code	Data Type	Field Description
1	Edge Server IP	edge_server_ip	STRING	Accelerated node server IP address.
2	Edge Server Country or Region	edge_server_country	STRING	Country (such as the United States, China, Russia, etc.) or region (such as Mainland China, Hong Kong, Macau, Taiwan, etc.) where the accelerated node server IP is located. Supports codes, Chinese, and English. The code data follows the ISO 3166 two-letter standard.
3	Edge Server Region (Province/State)	edge_server_region	STRING	Region where the accelerated node server IP is located. For example: provinces in Mainland China or states in the United States. Supports codes and Chinese. The code data follows the ISO 3166 two-letter standard.
4	Edge Server ISP	edge_server_isp	STRING	The ISP to which the accelerated node server IP belongs. Supports Chinese and English.
5	Edge Server Latitude	edge_server_latitude	STRING	Latitude where the accelerated node server IP is located.
6	Edge Server Longitude	edge_server_longitude	STRING	Longitude where the accelerated node server IP is located.
7	Edge Node Server Port	edge_server_port	INT	The server port of the acceleration node.

Cache

Number	Field Name	Field Code	Data Type	Field Description
1	Edge Node Cache Hit Status	cache_status_edge	STRING	This field indicates the cache hit status of the request at the edge node. `MISS` means the cache was not hit, and `HIT` means the cache was hit.
2	Cache Hit Status	cache_status	STRING	This field indicates the cache hit status of the request. `MISS` means the cache was not hit, and `HIT` means the cache was hit. Note that this status reflects the cache hit situation across the entire acceleration node chain. Therefore, if the status is `MISS` at the edge node but `HIT` at the relay node, it will be marked as `HIT`.

Response

No.	Field Name	Field Code	Data Type	Field Description
1	Response Send Duration	response_send_duration	DOUBLE	Duration of sending the complete response, i.e., the time the node takes to send the entire response body (until the last byte) to the system buffer. Unit: seconds.
2	Node Response Status Code	response_status_code	LONG	HTTP status code sent by the acceleration node server to the client. For example: 200, 302, 403, 500, etc.
3	Response Size	response_bytes	LONG	The amount of traffic sent by the acceleration node server to the client, including both response headers and response body. Unit: bytes.
4	Response Body Size	response_body_bytes	LONG	Traffic size of the response body sent by the acceleration node server to the client, excluding response headers. Unit: bytes.
5	Response Header Content-Type	response_content_type	STRING	The value of the `Content-Type` response header sent by the acceleration node server to the client.
6	Response Header Content-Length	response_content_length	STRING	The value of the `Content-Length` response header sent by the acceleration node server to the client.
7	Response Header Via	response_via	STRING	The value of the `Via` response header sent by the acceleration node server to the client.
8	Response Initiation Indicator	response_first_byte_sent	INT	Indicates whether the first byte of the response body for the current request has been sent to the client. A value of `1` means it has been sent (response started), and `0` means it has not. - For 200 responses, the value becomes `1` after the response header is sent. - For 206 responses, if the `Range` header in the request starts with ‘0’, the value is `1` after the response header is sent. - If there is no response body, the value is `1` after the response header is sent.
9	Response Completion Indicator	response_last_byte_sent	INT	Indicates whether the last byte of the response body for the current request has been sent to the client. A value of `1` means the last byte has been sent (response complete), and `0` means it has not. - Under normal transfer conditions, if all data has been sent to the client, the value is `1`; otherwise, it is `0`. - For Chunked Transfer Encoding, if the last chunk has been successfully sent to the client, the value is `1`.
10	Response Time (ms)	response_time_ms	LONG	The total duration of request processing, measured from the time the acceleration node server reads the first byte from the client to the time it sends the last byte back to the client. This includes both the request receive time and the response processing time. For persistent connection range requests, this field represents the processing time for each individual range request. Unit: milliseconds.

Custom

No.	Field Name	Field Code	Data Type	Field Description
1	Custom Log Field	custom_field	STRING	If the standard log fields do not meet your logging requirements, you can configure custom log fields on the acceleration domain. Custom logs are output in Key-Value format, with multiple KV pairs separated by commas.

Note:

The availability of log fields may vary depending on the actual configuration. We recommend selecting them according to your specific business requirements.

Currently, logs related to live streaming services are not included.

Media Delivery

Cloud Security

Web Performance

Network Acceleration

Infrastructure

Edge Computing

Console Guide

Developer Services

Management and Services

CDN Access Log

Basic

Client

Request

EdgeServer

Cache

Response

Custom

Related Articles

디렉토리