icon-unified.svg
Experience Center

About Browser Access Log Fields

The Log Streaming Service can send HTTP log information related to Browser Access to any third-party log analytics tool. By default, the log type, Browser Access, includes the fields listed in the table below for each log template (i.e., CSV, JSON, TSV). While configuring your log receiver, you can edit the default log stream content to capture only specific fields, and create a Custom log template.

  • {"LogTimestamp":"Wed Juthl 3 05:12:25 2019","ConnectionID":"","Exporter":"unset","TimestampRequestReceiveStart":"2019-07-03T05:12:25.723Z","TimestampRequestReceiveHeaderFinish":"2019-07-03T05:12:25.723Z","TimestampRequestReceiveFinish":"2019-07-03T05:12:25.723Z","TimestampRequestTransmitStart":"2019-07-03T05:12:25.790Z","TimestampRequestTransmitFinish":"2019-07-03T05:12:25.790Z","TimestampResponseReceiveStart":"2019-07-03T05:12:25.791Z","TimestampResponseReceiveFinish":"2019-07-03T05:12:25.791Z","TimestampResponseTransmitStart":"2019-07-03T05:12:25.791Z","TimestampResponseTransmitFinish":"2019-07-03T05:12:25.791Z","TotalTimeRequestReceive":127,"TotalTimeRequestTransmit":21,"TotalTimeResponseReceive":73,"TotalTimeResponseTransmit":13,"TotalTimeConnectionSetup":66995,"TotalTimeServerResponse":1349,"Method":"GET","Protocol":"HTTPS","Host":"portal.beta.zdemo.net","URL":"/speeddial-18.0.99-82-gd7ba322-dirty/media/HelveticaNeueLTStd-Regular.762cbf85.woff","UserAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Safari/605.1.15","XFF":"","NameID":"admin@zdemo.net","StatusCode":304,"RequestSize":615,"ResponseSize":331,"ApplicationPort":443,"ClientPublicIp":"139.216.128.195","ClientPublicPort":50042,"ClientPrivateIp":"","Customer":"ANZ Team/zdemo in beta","ConnectionStatus":"","ConnectionReason":"",https://example.com,token_created}
    Close

The following table includes descriptions and supported field format specifications for each field within the template. To learn more about the format specifications listed for each field, including examples, see Log Field Format Specifications.

FieldDescriptionSupported Field Format Specifications
LogTimestampTimestamp when the log was generated
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
ConnectionIDThe application connection ID
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
ExporterThe Browser Access Service instance to a Public Service Edge for Private Applications or a Private Service Edge for Private Applications instance
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
TimestampRequestReceiveStartTimestamp in microseconds when Browser Access Service received the first byte of the HTTP request from web browser
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampRequestReceiveHeaderFinishTimestamp in microseconds when Browser Access Service received the last byte of the HTTP header corresponding to the request from web browser
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampRequestReceiveFinishTimestamp in microseconds when Browser Access Service received the last byte of the HTTP request from web browser
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampRequestTransmitStartTimestamp in microseconds when Browser Access Service sent the first byte of the HTTP request to the web server
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampRequestTransmitFinishTimestamp in microseconds when Browser Access Service sent the last byte of the HTTP request to the web server
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampResponseReceiveStartTimestamp in microseconds when Browser Access Service received the first byte of the HTTP response from the web server
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampResponseReceiveFinishTimestamp in microseconds when Browser Access Service received the last byte of the HTTP response from the web server
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampResponseTransmitStartTimestamp in microseconds when Browser Access Service sent the first byte of the HTTP response to the web browser
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TimestampResponseTransmitFinishTimestamp in microseconds when Browser Access Service sent the last byte of the HTTP response to the web browser
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
TotalTimeRequestReceiveTime difference between reception of the first and last byte of the HTTP request from the web browser as seen by the Browser Access Service
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
TotalTimeRequestTransmitTime difference between transmission of the first and last byte of the HTTP request towards the web server as seen by the Browser Access Service
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
TotalTimeResponseReceiveTime difference between reception of the first and last byte of the HTTP response from the web server as seen by the Browser Access Service
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
TotalTimeResponseTransmitTime difference between transmission of the first and last byte of the HTTP response towards the web browser as seen by the Browser Access Service
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
TotalTimeConnectionSetupTime difference between reception of the first byte of the HTTP request from web browser and transmission of the first byte towards the web server, as seen by the Browser Access Service
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
TotalTimeServerResponseTime difference between transmission of the the last byte of the HTTP request towards the web server and reception of the first byte of the HTTP response from web server, as seen by the Browser Access Service
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
MethodThe HTTP request method
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
ProtocolThe HTTP protocol
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
HostThe Web application
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
URLThe URL requested by the user
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
UserAgentThe user agent string as specified in the HTTP host request header
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
XFFThe X-Forwarded-For (XFF) HTTP header
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
NameIDThe NameID received by Private Applications in the SAML assertion from the IdP
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
StatusCodeThe HTTP status code
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
RequestSizeThe size of the HTTP request
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
ResponseSizeThe size of the HTTP response
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
ApplicationPortThe application port on the web server
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
ClientPublicIpThe public IP address of the user's device
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
ClientPublicPortThe source port used by the user's device
  • %[OPT]d
  • %[OPT]x
  • %[OPT]f
  • %[OPT]o
ClientPrivateIpThe private IP address of the user's device
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
CustomerThe name of the customer
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
ConnectionStatusThe status of the connection
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
ConnectionReasonThe internal reason
  • %[OPT]s
  • %[OPT]j
  • %[OPT]J
  • %[OPT]o
CorsTokenThe token from the CORS request
  • %[OPT]s
OriginThe Browser Access domain that led to the origination of the CORS request
  • %[OPT]s
Related Articles
About the Log Streaming ServiceConfiguring a Log ReceiverAbout User Activity Log FieldsAbout User Status Log FieldsAbout App Connector Metrics Log FieldsAbout App Connector Status Log FieldsAbout Private Service Edge Metrics Log FieldsAbout Private Service Edge Status Log FieldsAbout Audit Log FieldsAbout Browser Access Log FieldsAbout AppProtection Log FieldsUnderstanding the Log Stream Content Format