0%

Log Shipping Fields

Log Shipping Default Fields

Once Log Targets are configured and Services are linked to the Log Shipping targets, log lines will start flowing into the Log Shipping Target bucket.

Logs are written out in JSON format, with name value pairs for each log line. Below is a sample log line, with details of the log fields that are included on each log line.

Delivery Access Log Line Example:

[{"CF5xCode":0,"CacheBackendChain":"fmmia1:s7ord1","CacheOriginType":"co","CachePurgeTS":"1781192130","CacheStatus":true,"CacheUpstreamTTFB":"0.001 : 0.000","CacheXCF1":"M","CacheXCF2":"H","CacheXCF3":"M","CacheXCF4":"-","CacheXCFError":"-","ClientASN":33363,"ClientAccept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","ClientAcceptCharset":"-","ClientAcceptEncoding":"gzip, deflate, br, zstd","ClientAcceptLanguage":"en-US,en;q=0.9","ClientIP":"144.156.21.221","ClientIPV4":"144.156.21.221","ClientIPV4ASN":33363,"ClientIPV6":"-","ClientIPV6ASN":"0","ClientRemotePort":64200,"ClientReqHTTPHost":"cdnservicename.cachefly.net","ClientReqHTTPMethod":"GET","ClientReqHTTPProtocol":"HTTP/2.0","ClientReqLength":"914","ClientReqPath":"/assets/beach2.jpg","ClientReqQuery":"ver=1&param=cf2assets/beach2","ClientReqRange":"-","ClientReqReferer":"-","ClientReqScheme":"https","ClientReqURI":"/assets/beach2.jpg?ver=1&param=cf2assets/beach2","ClientReqURIScheme":"https","ClientUserAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36","EdgeFrontend":"frontendZ.mia1","EdgeIPV4":"205.234.175.175","EdgeReqID":"bdb21fff5eefe3735d41368457c949ac","EdgeResponseBytes":"138237","EdgeResponseContentEncoding":"-","EdgeResponseContentLength":138237,"EdgeResponseContentRange":"-","EdgeResponseContentType":"image/jpeg","EdgeResponseFirstByteTime":0.001,"EdgeResponseLastModified":"Tue, 26 Mar 2024 20:38:46 GMT","EdgeResponseStatus":200,"EdgeTimeMS":0.001,"EdgeXCF1":"33895:fZ.mia1:co:1781192130:cacheN.mia1-v:M","PopCacheStatus":true,"XForwardedFor":"-","auid":30504,"country":"US","pid":1551,"pop":"mia1","stream":"stdout","suid":33908,"timestamp":"2026-06-11T08:36:50-07:00","uid":33908}]

Origin Log Line Example:

[{"ReqMD5":"1781192242","ReqSKey":"33908/beach.jpg1781192242https&newgzip=1","ReqVXID":"-","auid":30640,"content_encoding":"-","customer_origin":true,"ecs":false,"edgehost":"cdnservicename.cachefly.net","handling":"-","hostname":"storage7.ord1","httpversion":"HTTP/1.1","ms4_read_bytes":"-","range":"-","referrer":"-","remoteip":"16.15.236.56","reqid":"1ccdbb03cae28c793068cef61fd6bb19","request_bytes":1282,"response_bytes":41839,"served_by":"-","slicer_meta":"-","slicer_sub":"-","status":200,"suid":33908,"time_bereq":0.00003,"time_beresp":0.12847,"time_berespbody":0.022395,"time_fetch":0.000305,"time_mse4_fetch":"-","time_mse4_insert":"0.000332","time_mse4_network":"-","time_mse4_read":"-","time_mse4_total":"-","time_process":0.000204,"time_req":0.0,"time_reqbody":0.0,"time_resp":0.0,"time_taken":226509,"timestamp":"2026-06-11T08:42:11-0700","ttfb":0.203911,"uid":33908,"url":"/beach.jpg","vside":"b","vxid":"477385876","xf_proto":"-","xforwardedfor":"144.156.21.221"},{"ReqMD5":"1781192242","ReqSKey":"33908/cf4/beach.jpg1781192242https&newgzip=1","ReqVXID":"-","auid":30640,"content_encoding":"-","customer_origin":true,"ecs":false,"edgehost":"cdnservicename.cachefly.net","handling":"-","hostname":"storage7.ord1","httpversion":"HTTP/1.1","ms4_read_bytes":"-","range":"-","referrer":"-","remoteip":"54.231.232.210","reqid":"4f586137a58dd2e194dbe58859a4f4f8","request_bytes":1286,"response_bytes":284,"served_by":"-","slicer_meta":"-","slicer_sub":"-","status":404,"suid":33908,"time_bereq":0.000026,"time_beresp":0.045052,"time_berespbody":0.000145,"time_fetch":0.000253,"time_mse4_fetch":"-","time_mse4_insert":"0.000078","time_mse4_network":"-","time_mse4_read":"-","time_mse4_total":"-","time_process":0.000181,"time_req":0.0,"time_reqbody":0.0,"time_resp":0.0,"time_taken":118602,"timestamp":"2026-06-11T08:43:32-0700","ttfb":0.118277,"uid":33908,"url":"/cf4/beach.jpg","vside":"b","vxid":"478183523","xf_proto":"-","xforwardedfor":"144.156.21.221"}]

Log Shipping Field Definitions

Our knowledge base provides information for configuring log shipping and this article can be found here

The format of the logs is JSON with name value pairs, with the field names self documenting.

Below are the "end user" access log shipping fields with sample values:

Log Field with Value

Definition

"CF5xCode":0,

CacheFly CF5 Code Internal

"CacheBackendChain": "daord1:s7ord1",

Cache Backend Chain for debugging.

POP id shown.

"CacheOriginType": "co",

Customer Origin Type "co" is customer origin

"CachePurgeTS": "1733172364"

Last Purge Time Stamp

"CacheStatus": true,

Cache Status

True: Hit

False: Miss

"CacheUpstreamTTFB": "- : -"

Upstream Time to First Byte

"CacheXCF1": "-",

CacheFly XCF1 Header Hit status

M - Miss,

H - Hit,

B - Bypass Caching Frontend

"-" - Bypass Caching Frontend

"CacheXCF2": "H",

CacheFly XCF2 Header Hit status -

M- Miss

H - Hit

"CacheXCF3": "M",

CacheFly XCF3 Header Hit status

M - Miss

H - Hit

"CacheXCF4": "-",

CacheFly XC4 Header

"CacheXCFError": "-",

CacheFly Error

"ClientAccept":"text/htmlapplication"

Client Accept Header

"ClientAcceptCharset:"-"

Client Accept Charset Header

"ClientAcceptEncoding": "-",

Client Accept Encoding Header

"ClientAcceptLanguage":"enUS,en;q=0.9",

Client Accept Language Header

"ClientIPV4": "111.222.333.444",

Client IPV4 Address of end user

"ClientIPV4ASN": 12345,

Client AS Number for IPV4 addresses

"ClientASN": 12345,

Client AS Number for any IP version (IPV4 and IPV6)

"ClientIPV6": "-",

Client IPV6 Address of end user

"ClientIPV6ASN": "12345",

Client IPV6 AS number for IPV6 addresses

"ClientRemotePort":"56384"

Client Remote Port Internal

"ClientReqHTTPHost": "example.cachefly.net",

Client Host Header

"ClientReqHTTPMethod": "GET",

Client Request Method

examples - GET, HEAD, OPTIONS,PUT,POST

"ClientReqHTTPProtocol": "HTTP/2.0",

Client Request Protocol Version

HTTP/1.0 or HTTP/2.0

"ClientReqLength": "123",

Length of Client Request in bytes

"ClientReqPath": "/path/to/file.ext",

Client Request path portion only

"ClientReqQuery": "-",

Client Request Query Parameters

"ClientReqRange": "bytes=0-123",

Client Byte-Range - includes bytes requested from Range Header

"ClientReqReferer": "-",

Client Referer

"ClientReqURI": "/path/to/file.ext?ver=1&param=2",

Client Full URI -

full path of URI including Query Strings

"ClientReqURIScheme": "https",

Client Protocol Scheme

http or https

"ClientReqScheme": "https",

Client Protocol Scheme as Served

( http or https -

How the request was actually served - If client speaks http over an https port, this field will document request as "http"

"ClientUserAgent": "curl/8.7.1",

Client User Agent

"EdgeFrontend": "frontendT.ord1",

CDN Frontend Server

Three letter POP code

"EdgeIPV4": "205.234.175.175",

CDN IPV4 Address

"EdgeReqID": "a5d44cb886de717f1f6489b96ffc7cd4",

CDN Request ID -

primarily used for debugging

"EdgeResponseBytes": "1234",

CDN Response Bytes Delivered to end user

"EdgeResponseContentEncoding": "-",

CDN Response Content Encoding

for example gzip, br

"EdgeResponseContentLength": 1234,

CDN Response Content-Length -

Content length of asset

"EdgeResponseContentRange":"-"

CDN Response Content Range -

Range of Content Delivered

"EdgeResponseContentType": "text/html; charset=UTF-8",

CDN Response Content Type

"EdgeResponseFirstByteTime":"0.005"

CDN Response First Byte Time - Time in seconds with 3 decimal accuracy for millisecond data

"EdgeResponseLastModified":"-"

CDN Response Last Modified Header

"EdgeResponseStatus": 200,

CDN Response Status Code

"EdgeTimeMS": 0.002,

Edge Time in Milliseconds

"EdgeXCF1": "12345:fT.ord1:co:1733172364:cacheN.ord1-01:P",

Complete CacheFly XCF1 header. Contains debug information including POP code, cache status, last purged epoch time

"PopCacheStatus": true,

POP Cache Status

Hit - True

Miss - False

XForwardedFor:"-"

X-Forwarded-For Header

"auid": 12345,

CDN Account id

"country": "US",

Country code of end user

"pid": 123456,

Internal Field - Log Process id

"pop": "ord1",

POP Code

3 Letter Airport Code

"stream": "stdout",

Internal Field - Log output stdout

"timestamp":"2025-06-23T07:49:51-07:00"

Timestamp of Request

"uid":12345

CDN Service id

0%