All Products
Search

This Product

    Edge Security Acceleration:Use filter criteria

    Document Center

    Edge Security Acceleration:Use filter criteria

    Last Updated:Nov 26, 2025

    This topic describes how to filter data using filters, time ranges, and in-module options. It also introduces the specific parameters.

    Filter criteria

    The analytics feature of ESA supports three filtering methods: by criteria, by time, and within a dimension module.

    Filter using a filter

    You can filter data by dimensions such as Host, HTTP version, and Client IP. After you select filter criteria, only data that matches the criteria is displayed. Click image to add more filter criteria based on the ones you have selected. You can set a maximum of 10 filter criteria. For more information about the filter parameters, see Supported fields and operators.

    image

    Filter by time (required)

    You can select a Custom Time Range for your query. By default, traffic data from the last 24 hours is displayed.

    image

    Filter within a dimension module

    Filtering within a dimension module means filtering data within a specific dimension based on the Filters and time range that you have already applied.

    • When you Filter a specific item within a dimension, the console displays more detailed information about that item.

    • When you Exclude a specific item within a dimension, the console displays information about the dimension but excludes that item.

    Take Client IP as an example.

    • In the dimension module, you can use the Filter operation to Filter an IP address.

      image

    • On the Overview page, you can also use the Filter operation to Filter by IP address.

      image

    Supported fields and operators

    Filter field descriptions

    Filter type

    Description

    Example value

    Version

    The configuration version number that is used after version management is enabled for the current site.

    Select a value from the drop-down list. Examples:

    • 0

    • 1

    • 2

    Cache Status

    The cache status of the client request.

    Select a value from the drop-down list. Examples:

    • HIT

    • MISS

    • EXPRIED

    For more information, see Cache response information.

    Client ISP

    The Internet Service Provider (ISP) to which the client is connected.

    Select a value from the drop-down list. Examples:

    • China Unicom

    • China Telecom

    • China Mobile

    Client ASN

    The autonomous system number (ASN) to which the client is connected.

    For example, if the client's ASN is AS12345, the client is connected to autonomous system 12345.

    Country/Region

    The country or region to which the client IP address belongs.

    Select a value from the drop-down list. Examples:

    • The Chinese mainland

    • Canada

    • France

    Device Type

    The type of device from which the client request originated. This is parsed from the User-Agent header in the HTTP request.

    Select a value from the drop-down list. Examples:

    • Desktop

    • Mobile

    • Tablet

    IP Version

    The protocol version of the client IP address. Valid values: IPv4 and IPv6.

    Select a value from the drop-down list. Examples:

    • IPv4

    • IPv6

    Client IP

    View request data from a specified client IP.

    You can enter multiple values. Separate them with commas (,). Example: 192.168.1.X, 192.168.2.X.

    Referer

    The Referer header in the client request.

    You can enter multiple values. Separate them with commas (,). Example: *.developer.aliyundoc.com.

    Host

    The requested hostname.

    You can enter multiple values. Separate them with commas (,). Example: www.example.com.

    HTTP Method

    The request method used between the client and the server.

    Select a value from the drop-down list. Examples:

    • GET

    • POST

    • PUT

    HTTP Version

    The version of the HTTP protocol.

    Select a value from the drop-down list. Examples:

    • HTTP / 1.0

    • HTTP / 1.1

    • HTTP / 2.0

    Path

    The part of the URL that indicates the location of the resource.

    You can enter multiple values. Separate them with commas (,). For example, in the URL https://www.example.com/path/to/resource.html, the path is /path/to/resource.html.

    Query String

    The part of the URL that is used to pass parameters.

    You can enter multiple values. Separate them with commas (,). For example, in the URL https://www.example.com/search?query=apple&category=fruit, the query string is query=apple&category=fruit.

    Content Type

    The HTTP header field that specifies the format and type of the transmitted data.

    Select a value from the drop-down list. Examples:

    • application / atom + xml

    • application / epub + zip

    • application / gzip

    Edge Status Code

    The HTTP response status code that the edge node returns.

    Select a value from the drop-down list. Examples:

    • 100 Continue

    • 204 No Content

    • 404 Not found

    Origin Status Code

    The HTTP response status code that the origin server returns.

    Select a value from the drop-down list. Examples:

    • 100 Continue

    • 204 No Content

    • 404 Not found

    Browser Type

    The type of browser used for the client request.

    Select a value from the drop-down list. Examples:

    • Chrome

    • IE

    • GooglrBot

    OS Type

    The type of operating system that runs on the client's device.

    Select a value from the drop-down list. Examples:

    • Windows

    • Android

    • iOS

    User Agent

    The value of the User-Agent header in the client request.

    You can enter multiple values. Separate them with commas (,). Example: *curl*|*IE*|*chrome*|*firefox*.

    TLS Version

    The version of the TLS protocol used by the client request.

    Select a value from the drop-down list. Examples:

    • TLSv1

    • TLSv1.1

    • TLSv1.1

    X-Forwarded-For

    The value of the X-Forwarded-For header in the client request.

    Example: 192.168.1.X, 192.168.2.X.

    Operators

    Operator name

    Description

    equals

    Queries for data where the filter item is equal to any of the specified values.

    does not equal

    Queries for data where the filter item is not equal to any of the specified values.