Log Shipping Default Fields
Once Log Targets are configured and Services are linked to the Log Shipping targets, log lines will start flowing into the Log Shipping Target bucket.
Logs are written out in JSON format, with name value pairs for each log line. Below is a sample log line, with details of the log fields that are included on each log line.
Delivery Access Log Line Example:
[{"CF5xCode":0,"CacheBackendChain":"dcewr1:s2ewr1","CacheOriginType":"co","CachePurgeTS":"1749489818","CacheStatus":false,"CacheUpstreamTTFB":"- : -","CacheXCF1":"-","CacheXCF2":"P","CacheXCF3":"P","CacheXCF4":"-","CacheXCFError":"-","ClientAcceptEncoding":"-","ClientIPV4":"111.222.333.444","ClientIPV4ASN":1234,"ClientReqHTTPHost":"serivce.cachefly.net","ClientReqHTTPMethod":"HEAD","ClientReqHTTPProtocol":"HTTP/2.0","ClientReqLength":"134","ClientReqPath":"/path/to/file.txt","ClientReqQuery":"-","ClientReqRange":"-","ClientReqReferer":"-","ClientReqURI":"/path/to/file.txt","ClientReqURIScheme":"https","ClientUserAgent":"curl/8.7.1","EdgeFrontend":"frontendS.ewr1","EdgeIPV4":"205.234.175.175","EdgeReqID":"c1e6c2c25815cb4dc3f908e7afb71529","EdgeResponseBytes":"0","EdgeResponseContentEncoding":"-","EdgeResponseContentLength":0,"EdgeResponseContentType":"text/html","EdgeResponseStatus":200,"EdgeTimeMS":0.09,"EdgeXCF1":"12345:fS.ewr1:co:1749489818:cacheN.ewr1-01:P","PopCacheStatus":false,XForwardedFor:"-","auid":12345,"country":"US","pid":2552235,"pop":"ewr1","stream":"stdout","suid":12345,"timestamp":"2025-06-23T07:49:51-07:00","uid":12345}]
Origin Log Line Example:
[{"ReqMD5":"1749489818","ReqSKey":"12345/bucket/path/to/file.txt1749489818https","ReqVXID":"-","auid":12345,"content_encoding":"-","customer_origin":true,"ecs":false,"edgehost":"service.cachefly.net","handling":"-","hostname":"storage2.ewr1","httpversion":"HTTP/1.1","referrer":"-","remoteip":"111.222.333.444","reqid":"c1e6c2c25815cb4dc3f908e7afb71529","request_bytes":1073,"response_bytes":0,"served_by":"-","status":200,"suid":12345,"time_bereq":0.000034,"time_beresp":0.023141,"time_berespbody":0.000269,"time_fetch":0.000323,"time_process":0.000127,"time_req":0.0,"time_reqbody":0.0,"time_resp":0.0,"time_taken":86670,"timestamp":"2025-06-23T07:49:50-0700","ttfb":0.086275,"uid":12345,"url":"/bucket/path/to/file.txt","vside":"b","vxid":"341499796","xf_proto":"-","xforwardedfor":"11.22.33.44"}]
Log Shipping Field Definitions
Our knowledge base provides information for configuring log shipping and this article can be found here
The format of the logs is JSON with name value pairs, with the field names self documenting.
Below are the "end user" access log shipping fields with sample values:
Log Field with Value | Definition |
|---|---|
"CF5xCode":0, | CacheFly CF5 Code |
"CacheBackendChain": "daord1:s7ord1", | Cache Backend Chain for debugging. POP id shown. |
"CacheOriginType": "co", | Customer Origin Type "co" is customer origin |
"CachePurgeTS": "1733172364" | Last Purge Time Stamp |
"CacheStatus": true, | Cache Status True: Hit |
"CacheUpstreamTTFB": "- : -" | Upstream Time to First Byte |
"CacheXCF1": "-", | CacheFly XCF1 Header Hit status M- Miss, H Hit |
"CacheXCF2": "H", | CacheFly XCF2 Header Hit status - M- Miss, H Hit |
"CacheXCF3": "M", | CacheFly XCF3 Header Hit status M- Miss, H Hit |
"CacheXCF4": "-", | CacheFly XC4 Header |
"CacheXCFError": "-", | CacheFly Error |
"ClientAccept":"text/htmlapplication" | Client Accept Header |
"ClientAcceptCharset:"-" | Client Accept Charset Header |
"ClientAcceptEncoding": "-", | Client Accept Encoding Header |
"ClientAcceptLanguage":"enUS,en;q=0.9", | Client Accept Language Header |
"ClientIPV4": "111.222.333.444", | Client IPV4 Address |
"ClientIPV4ASN": 12345, | Client AS Number |
"ClientRemotePort":"56384" | Client Remote Port Header |
"ClientReqHTTPHost": "example.cachefly.net", | Client Host Header |
"ClientReqHTTPMethod": "GET", | Client Request Method |
"ClientReqHTTPProtocol": "HTTP/2.0", | Client Request Protocol Version |
"ClientReqLength": "123", | Client Request Length |
"ClientReqPath": "/path/to/file.ext", | Client Request path only |
"ClientReqQuery": "-", | Client Request Query Parameters |
"ClientReqRange": "bytes=0-123", | Client Byte-Range Requested |
"ClientReqReferer": "-", | Client Referer |
"ClientReqURI": "/path/to/file.ext", | Client Full URI |
"ClientReqURIScheme": "https", | Client Protocol Scheme |
"ClientUserAgent": "curl/8.7.1", | Client User Agent |
"EdgeFrontend": "frontendT.ord1", | CDN Frontend Server Three letter POP code |
"EdgeIPV4": "205.234.175.175", | CDN IPV4 Address |
"EdgeReqID": "a5d44cb886de717f1f6489b96ffc7cd4", | CDN Request ID |
"EdgeResponseBytes": "1234", | CDN Response Bytes |
"EdgeResponseContentEncoding": "-", | CDN Response Content Encoding |
"EdgeResponseContentLength": 1234, | CDN Response Content-Length |
"EdgeResponseContentRange":"-" | CDN Response Content Range |
"EdgeResponseContentType": "text/html; charset=UTF-8", | CDN Response Content Type |
"EdgeResponseFirstByteTime":"0.005" | CDN Response First Byte Time |
"EdgeResponseLastModified":"-" | CDN Response Last Modified Header |
"EdgeResponseStatus": 200, | CDN Response Status Code |
"EdgeTimeMS": 0.002, | Edge Time in Milliseconds |
"EdgeXCF1": "12345:fT.ord1:co:1733172364:cacheN.ord1-01:P", | Complete CacheFly XCF1 header. Contains POP code |
"PopCacheStatus": true, | POP Cache Status Hit - True |
XForwardedFor:"-" | X-Forwarded-For Header |
"auid": 12345, | CDN Account id |
"country": "US", | Country code of end user |
"pid": 123456, | Process id |
"pop": "ord1", | POP Code 3 Letter Airport Code |
"stream": "stdout", | Stream Method |
"timestamp":"2025-06-23T07:49:51-07:00" | Timestamp of Request |
"uid":12345 | CDN Service id |