The log report function within the log analysis feature of Anti-DDoS Proxy embeds dashboards from Log Service. You can view default dashboards, including the DDoS Access Center and DDoS Operation Center. After enabling log collection for a website domain, you can view the dashboards for that domain in its log report.
Prerequisites
-
You have added a website domain. For more information, see Add websites.
-
Log analysis and log collection are enabled for the website domain. For more information, see Overview.
Procedure
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Choose the Chinese Mainland region.
Anti-DDoS Proxy (Outside Chinese Mainland): Choose the Outside Chinese Mainland region.
In the left-side navigation pane, choose .
-
Select the domain that you want to query and click Log Reports.
NoteThis feature requires the log collection Status for the website domain to be Enabled.
After you open the log report, you can view the following default dashboards:
-
DDoS Access Center: Displays basic website metrics such as PV, UV, inbound traffic, and peak bandwidth. It also shows access trends, access source distribution, accessed domains, and client types.
-
DDoS Operation Center: Displays the overall operational status of your website, including inbound and outbound bandwidth trends, request and blocked request trends, an attacker list, and the most attacked websites.
Note-
The log report section displays multiple charts in a predefined layout. For more information about the chart types, see Overview of statistical charts.
-
For more information about the charts on the default dashboards, see Charts on the default dashboards.
-
-
In the upper-right corner of the page, set a time range to view the default dashboards.
All charts in a log report display data from a specific time range. For example, the default time range for the number of visits is 1 hour and for access trends is 1 week. If you want to apply the same time range to all charts on the current page, use the time picker.
Default dashboard charts
DDoS Access Center
|
Chart |
Type |
Default time range |
Description |
Example |
|
PV |
Single value |
1 hour (relative) |
The total number of page views. |
100,000 |
|
UV |
Single value |
1 hour (relative) |
The total number of unique clients. |
100,000 |
|
Inbound traffic |
Single value |
1 hour (relative) |
Total inbound website traffic, in MB. |
300 MB |
|
Peak inbound bandwidth |
Single value |
Today (hourly) |
The peak rate of inbound traffic for website requests. Unit: Bytes/s. |
100 Bytes/s |
|
Peak outbound bandwidth |
Single value |
Today (hourly) |
The peak rate of outbound traffic for website requests. Unit: Bytes/s. |
100 Bytes/s |
|
Bandwidth trend |
Dual line chart |
1 week (relative) |
Trend of inbound and outbound website traffic, in KB/s. |
N/A |
|
PV/UV trend |
Dual line chart |
1 week (relative) |
The trend of PV and UV. |
N/A |
|
Access status distribution |
Pie chart |
1 week (relative) |
The distribution of requests by status code, such as 200, 304, and 400, in requests per minute. |
N/A |
|
Access source |
World map |
1 hour (relative) |
The distribution of visitor PVs by source country. |
N/A |
|
Inbound traffic source (World) |
World map |
1 hour (relative) |
The distribution of total inbound traffic by source country. Unit: MB. |
N/A |
|
Inbound traffic source (China) |
China map |
1 hour (relative) |
The distribution of total inbound traffic by source province. Unit: MB. |
N/A |
|
Access heatmap |
Geographic map (AMAP) |
1 hour (relative) |
A heatmap that shows the geographic distribution of visitors. |
N/A |
|
Source ISP |
Donut chart |
1 hour (relative) |
The distribution of inbound traffic from source ISPs, such as China Telecom, China Unicom, China Mobile, and CERNET. Unit: MB. |
N/A |
|
Referer |
Table |
1 hour (relative) |
The top 100 referer URLs and hosts, and the number of requests. |
N/A |
|
Access line distribution |
Donut chart |
1 hour (relative) |
The distribution of access requests across Anti-DDoS Proxy protection lines. |
N/A |
|
Client type distribution |
Donut chart |
1 hour (relative) |
The top 20 User Agents, such as iPhone, iPad, Windows IE, and Chrome. |
N/A |
|
Request content type distribution |
Donut chart |
1 hour (relative) |
The top 20 most requested content types, such as HTML, Form, JSON, and streaming data. |
N/A |
|
Accessed domains |
Donut chart |
1 hour (relative) |
The top 20 most frequently accessed domains. |
N/A |
|
Top clients |
Table |
1 hour (relative) |
Lists the top 100 clients by request volume, including their IP addresses, PVs, inbound traffic, failed request counts, and attack counts. |
N/A |
|
Slowest response URLs |
Table |
1 hour (relative) |
Lists the top 100 URLs with the longest response times, including the website, URL, response time, and visit count. |
N/A |
DDoS Operation Center
|
Chart |
Type |
Default time range |
Description |
Example |
|
Requests and blocked requests |
Dual line chart |
1 week (relative) |
Shows the trend of total requests versus blocked attack requests. |
N/A |
|
Inbound/Outbound bandwidth (KB/s) |
Dual line chart |
1 week (relative) |
Shows the trend of inbound and outbound bandwidth. |
N/A |
|
Attackers |
Table |
1 hour (relative) |
Lists the top 100 attackers, including their IP address, geographic location, attack count, and total attack traffic. |
N/A |
|
Top 10 attacked websites |
Table |
1 hour (relative) |
The 10 most attacked websites. |
N/A |