All Products
Search
Document Center

CDN:Fields in real-time logs

Last Updated:Jul 16, 2025

This topic describes the fields in real-time logs. After you enable the service, you can refer to the descriptions of each field in the following table.

Usage notes

Some Internet service providers (ISPs) may assign private IP addresses to clients in specific regions, causing CDN nodes to receive private IP addresses from users.

Note
  • Real-time log delivery does not currently have an Origin field. You can use the concatenated values of refer_protocol and refer_domain as a substitute for Origin.

  • Private IP address ranges include the following three:

    • Class A private IP addresses: 10.0.0.0 to 10.255.255.255, subnet mask: 10.0.0.0/8

    • Class B private IP addresses: 172.16.0.0 to 172.31.255.255, subnet mask: 172.16.0.0/12

    • Class C private IP addresses: 192.168.0.0 to 192.168.255.255, subnet mask: 192.168.0.0/16

No.

Field

Description

Indexed by default

1

unixtime

The end time of the request.

No

2

domain

The domain name to which the request was sent.

Yes

3

method

The request method.

Yes

4

scheme

The protocol over which the request was sent.

Yes

5

uri

The requested resource.

Yes

6

uri_param

The request parameters.

Yes

7

client_ip

The originating IP address of the client. The originating IP address is the first IP address in the X-Forwarded-For request header that is carried in the request, which is client_ip. If the client does not use a proxy to connect to the CDN node, the IP address is the same as the one used by the client to establish a connection with the CDN node.

Note: The format of the X-Forwarded-For request header is X-Forwarded-For: <client_ip>, <proxy_ip>.

Yes

8

proxy_ip

The proxy IP address. The proxy IP address is the second IP address in the X-Forwarded-For request header that is carried in the request, which is proxy_ip. If the client does not use a proxy to connect to the CDN node, the value of this field is -.

No

9

remote_ip

The IP address that is connected to the CDN node.

Yes

10

remote_port

The client port that is connected to the CDN node.

No

11

refer_protocol

The protocol in the HTTP Referer header.

No

12

refer_domain

The domain name in the HTTP Referer header.

Yes

13

refer_uri

The URI in the HTTP Referer header.

Yes

14

refer_param

The parameters in the HTTP Referer header.

No

15

request_size

The size of the request.

Yes

16

request_time

The response time. Unit: milliseconds.

Yes

17

response_size

The size of the response. Unit: bytes.

Yes

18

return_code

The HTTP status code that was returned.

Yes

19

sent_http_content_range

The value of the Range field in the response header. The Range value is specified by the origin server. Example: bytes=0-99/200.

No

20

server_addr

The IP address of the CDN node that served the request.

No

21

server_port

The port number of the CDN node that served the request.

No

22

body_bytes_sent

The size of the request body. Unit: bytes.

No

23

content_type

The type of the requested resource.

Yes

24

hit_info

The cache hit result, excluding requests for live streaming resources or dynamic content. Valid values: HIT and MISS. A value of HIT specifies a cache hit. A value of MISS specifies a cache miss.

Yes

25

http_range

The value of the Range field in the request header. Example: bytes=0-100.

No

26

user_agent

The information about the user agent.

Yes

27

uuid

The unique ID of the request (traceid).

Yes

28

via_info

The information about the Via header, which records the names of proxy servers or gateways that the request passed through.

No

29

xforwordfor

The X-Forwarded-For header in the request.

Yes