Skip to main content

Unified Access Log Format

IO River provides the ability to get CDN access logs in a unified format. When you configure streaming of logs to a logs destinations, the logs will be sent in a gzip files. The gzip files will contain a json arrays with multiple elements, each element represents a single HTTP request to the CDN.

Log Fields

Field NameTypeDescription
service_uidStringService UID (used in CNAME)
service_idStringID of the Service (GUID)
providerStringCDN provider which handled this request
timestampStringRequest timestamp
response_bytesIntegerSize of the response
status_codeIntegerHTTP status code of the response
pathStringRequest path
query_paramsStringRequest query string
domainStringRequest domain
refererStringRequest referer
geo_locationStringEnd user country code
http_versionStringRequest HTTP version
user_agentStringRequest user agent
client_ipStringEnd-user IP address
is_cachedBoolIndicates whether the request was served from cache
methodStringRequest method
midgress_bytesIntegerResponse midgress bytes
unified_logs_behavior_idStringLogging behavior Id
x_forwarded_forStringRequest X-Forwarded-For header
time_takenIntegerRequest processing time (ms) by the CDN

Log Line Example

{"service_uid":"IGYGE6MC94","service_id":"16acb9f9-79b7-41c8-b33a-2bfabcd2c5d0","provider":"Fastly","timestamp":"2024-01-13T14:29:03.816Z","response_bytes":1326,"status_code":200,"path":"/api/test/logs","domain":"test.ioriver-qa.net","referer":"https://www.example.com","geo_location":"IL","http_version":"HTTP/2","user_agent":"curl/8.1.2","client_ip":"93.172.248.221","is_cached":"true","method":"GET"}