This topic describes the fields in real-time logs. After you enable the service, you can refer to the descriptions of each field in the following table.
Usage notes
Some Internet service providers (ISPs) may assign private IP addresses to clients in specific regions, causing CDN nodes to receive private IP addresses from users.
Real-time log delivery does not currently have an Origin field. You can use the concatenated values of
refer_protocolandrefer_domainas a substitute forOrigin.Private IP address ranges include the following three:
Class A private IP addresses: 10.0.0.0 to 10.255.255.255, subnet mask: 10.0.0.0/8
Class B private IP addresses: 172.16.0.0 to 172.31.255.255, subnet mask: 172.16.0.0/12
Class C private IP addresses: 192.168.0.0 to 192.168.255.255, subnet mask: 192.168.0.0/16
No. | Field | Description | Indexed by default |
1 | unixtime | The end time of the request. | No |
2 | domain | The domain name to which the request was sent. | Yes |
3 | method | The request method. | Yes |
4 | scheme | The protocol over which the request was sent. | Yes |
5 | uri | The requested resource. | Yes |
6 | uri_param | The request parameters. | Yes |
7 | client_ip | The originating IP address of the client. The originating IP address is the first IP address in the Note: The format of the | Yes |
8 | proxy_ip | The proxy IP address. The proxy IP address is the second IP address in the | No |
9 | remote_ip | The IP address that is connected to the CDN node. | Yes |
10 | remote_port | The client port that is connected to the CDN node. | No |
11 | refer_protocol | The protocol in the HTTP Referer header. | No |
12 | refer_domain | The domain name in the HTTP Referer header. | Yes |
13 | refer_uri | The URI in the HTTP Referer header. | Yes |
14 | refer_param | The parameters in the HTTP Referer header. | No |
15 | request_size | The size of the request. | Yes |
16 | request_time | The response time. Unit: milliseconds. | Yes |
17 | response_size | The size of the response. Unit: bytes. | Yes |
18 | return_code | The HTTP status code that was returned. | Yes |
19 | sent_http_content_range | The value of the Range field in the response header. The Range value is specified by the origin server. Example: bytes=0-99/200. | No |
20 | server_addr | The IP address of the CDN node that served the request. | No |
21 | server_port | The port number of the CDN node that served the request. | No |
22 | body_bytes_sent | The size of the request body. Unit: bytes. | No |
23 | content_type | The type of the requested resource. | Yes |
24 | hit_info | The cache hit result, excluding requests for live streaming resources or dynamic content. Valid values: HIT and MISS. A value of HIT specifies a cache hit. A value of MISS specifies a cache miss. | Yes |
25 | http_range | The value of the Range field in the request header. Example: bytes=0-100. | No |
26 | user_agent | The information about the user agent. | Yes |
27 | uuid | The unique ID of the request (traceid). | Yes |
28 | via_info | The information about the Via header, which records the names of proxy servers or gateways that the request passed through. | No |
29 | xforwordfor | The X-Forwarded-For header in the request. | Yes |