All Products
Search
Document Center

Edge Security Acceleration:Analytics and logs

Last Updated:Sep 14, 2026

Edge Security Acceleration (ESA) collects and processes data at POPs through log analysis, real-time monitoring, and intelligent alerting to detect and respond to security threats, improve data visibility, and enhance operational efficiency.

ESA log analytics versus CDN

ESA data analytics is real-time and more interactive compared to the standard CDN service. Key differences:

Feature

ESA

CDN

Data screening

Supported

Not supported

Data latency

Seconds

High

Real-time top N ranking

Supported

Not supported

You can also query data in the console:

  • Location distribution analysis: Analyze traffic and requests distribution by country or region to optimize localized services and marketing strategies.

  • Performance and efficiency assessment: Analyze metrics such as page views and error codes to assess delivery efficiency and website health.

  • Resource optimization and planning: Plan bandwidth based on traffic and request data and optimize cache policies to reduce origin server load.

  • Security and compliance monitoring: Monitor encrypted request metrics to ensure secure data transmissions.

Features

  • Account analytics

    ESA analyzes access log data to provide account-level analytics and visualizations, including request and traffic distribution by country/region, encrypted requests, cache hit ratios, and error code counts.

  • Traffic analytics

    ESA analyzes access logs and back-to-origin logs to provide traffic analytics and visualizations for your website, helping you monitor performance and make data-driven decisions.

  • Standard log

    ESA packages standard logs hourly. Download access logs from the last 31 days to your local PC to optimize acceleration policies, monitor your website, detect risks, and understand user behavior.

  • Real-time logs

    ESA collects system, application, or device operation logs in real time to monitor business activities and tune configurations.

  • Instant logs

    Instant logs require no additional configuration. View access logs for specific websites in real time in the ESA console to pinpoint attacks, troubleshoot faults, and debug or test client-to-website connectivity.

  • Trace

    Simulate an HTTP/S request to the ESA platform to see which ESA configurations match and apply to your request. Works even before proxy acceleration is enabled. Customize request attributes such as geographic location, protocol, and headers. For websites with security protection, you can bypass security challenge rules.