You can view and filter App Connector status data for past events.

To view diagnostics for App Connectors:

1. Go to Logs > Insights > Diagnostics.
2. Under Log Type, choose App Connector Status.

By default, the detailed status and activity information for all App Connectors is displayed for events that occurred in the last 24 hours. To change the time range, click the Calendar menu and select a preset range or specify a custom start and end date. If you use a Custom Range, the start date must be within the last 14 days. To change the time zone, click the current Time Zone button.

Zscaler retains logs for rolling periods of at least 14 days during the subscription term. You can also view your logs or stream logs in real time using the Log Streaming Service (LSS). The data in the dashboard might be more recent than the data presented within Diagnostics.

Also, by default, the table displays the Total number of App Connector requests. You can change this by choosing one of the following filters:

• Errors: The total number of App Connector access errors.
• Successful: The total number of successful App Connector requests.

Filtering App Connector Status Diagnostics

On the App Connector Status page (Logs > Insights > Diagnostics and select Log Type: App Connector Status), you can apply filters or drill down further into the log data using the Query Builder. By default, no filters are applied. If you want to view and filter App Connector Status for real-time events, use Live Logs.

To configure filters using the Query Builder:

1. Click Add Filters and select a filter from the drop-down menu. To learn more, see App Connector Status Filters below.
2. Select a Boolean operator from the drop-down menu (e.g., Contains, Ends With, Equals, Not Equals, Starts With). The operators available are determined by the filter you are configuring.
3. Select the fields from the drop-down menu or enter the values required for the filter. The field or value required is determined by the filter you are configuring.

Filters using the Contains operator allow a maximum of 7 entries. All filters using operators that require text input must use a semicolon (;) to separate multiple entries (e.g., 137; 138; 139). When configuring multiple text entries and using the Less Than operator, the results show transactions starting from the largest entry provided. When configuring multiple text entries and using the Greater Than operator, the results show transactions starting from the smallest entry provided.

4. Click Apply.

To apply more filters, click Add Filters again or click on the Filter icon () within the table. To remove an added filter, click the Close icon then Apply. To remove all filters, click Clear All.

You can also click the Copy icon to save the filter query details. If you or another admin accesses Diagnostics, you can paste the query into the field by clicking the Clipboard icon.

See image.

App Connector Status Filters

You can add the following filters:

• Connection: Status Code: See logs with Authenticated, Authentication Failed, or Disconnected connections.
• App Connector: Connection Type: See logs for a specific App Connector connection type.
• App Connector: Name: See logs for a specific App Connector you've configured.
• App Connector: Private IP Address: See logs for a private App Connector IP address, which is the internal IP address configured for the App Connector.
• App Connector: Public IP Address: See logs for a public App Connector IP address, which is used to reach out to the Public Service Edge for Private Applications or Private Service Edge for Private Applications.
• Service Edge: Name (Public/Private): See logs for a specific ZPA Public Service Edge or ZPA Private Service Edge.

The table displays the following data about App Connector status and activity. You can expand each row to see more details or click the Expand/Collapse icon to expand or collapse all rows within the table. By default, the table displays 20 transactions. You can scroll to load more transactions.

• Session

  Displays one of the following session status codes:

  • Authenticated: The App Connector successfully authenticated.
  • Authentication Failed: The App Connector was unable to authenticate to the Zscaler cloud.
  • Disconnected: The App Connector successfully disconnected.

  For every status code, the following fields are displayed:

  • Session ID: The internal ID associated with the connection.
  • Connection Type: The type of connection the App Connector made. The different connection types are:
    • Control Connection
    • Service Edge Control Connection
    • Data Connection
    • Log Connection
  • App Connector Version: The version number of the App Connector.
  • App Connector Restart Reason: If the App Connector disconnects and restarts, the App Connector reason is displayed. If the Unavailable status is displayed, the reason for the restart is not available among the listed restart reasons.
  • Connection Status Log: View, download, and copy the raw JSON for the request.
    • Click the View Log icon to display the raw JSON for the request within the Admin Portal.
    • Click the Download icon to download the raw JSON for the request to a text (.txt) file.
    • Click the Copy icon to copy the raw JSON text for the request to your clipboard.

  Close
• Auth Log Timestamp

  The data and time when the log was generated. The column sorts requests by the date and start time in descending order. You can click the arrow icon to sort the requests in ascending order.

  The time displayed is based on the time you choose for your account setting in the Admin Portal.

  Close
• Authentication Time

  The time the App Connector authenticated to the Zscaler cloud. The column initially sorts requests based on the Auth Log Timestamp column date and time. You can click the arrow icon to sort the table in ascending or descending order based on this column.

  Close
• Disconnect Time

  The time that the App Connector disconnected from the Zscaler cloud. The column initially sorts requests based on the Auth Log Timestamp column date and time. You can click the arrow icon to sort the table in ascending or descending order based on this column.

  Close
• Name
  • App Connector Name: The name of the App Connector used to connect the application to the user. You can click on the name to open the Edit App Connector window.
  • App Connector ID: The internal ID (created by Private Applications) for the connection request to the application. You can click the Copy icon to copy the ID to your clipboard.
  • App Connector IP: The IP address used by the App Connector to connect to the Public Service Edge for Private Applications or Private Service Edge for Private Applications.
  • Private IP: The internal IP address configured for the App Connector.
  • Location: The city and country that the App Connector is connecting from.
  • App Connector Group Name: The name of the group the App Connector is included in. You can click on the name to open the Edit App Connector Group window.
  • App Connector Group ID: The internal ID (created by Private Applications) for the App Connector group. You can click the Copy icon to copy the ID to your clipboard.

  Close
• Service Edge
  • Name: The name of the Public Service Edge for Private Applications or Private Service Edge for Private Applications that processed the connection.
  • Location: The city or country where the Public Service Edge for Private Applications or Private Service Edge for Private Applications is located.

  Close

Within the table, you can click the Filter icon next to certain field names in order to drill down further into the data. The filter query section within the page updates automatically to include the proper filter for the field name you selected, along with the applicable Boolean operator configuration for that field.