Application Load Balancer Audit Trails Events: LoadBalancerTCPAccessLog
Event JSON schema
{
"eventId": "string",
"eventSource": "string",
"eventType": "string",
"eventTime": "string",
"authentication": {
"authenticated": "boolean",
"subjectType": "string",
"subjectId": "string",
"subjectName": "string",
"federationId": "string",
"federationName": "string",
"federationType": "string",
"tokenInfo": {
"maskedIamToken": "string",
"iamTokenId": "string",
"impersonatorId": "string",
"impersonatorType": "string",
"impersonatorName": "string",
"impersonatorFederationId": "string",
"impersonatorFederationName": "string",
"impersonatorFederationType": "string"
}
},
"resourceMetadata": {
"path": [
{
"resourceType": "string",
"resourceId": "string",
"resourceName": "string"
}
]
},
"requestMetadata": {
"remoteAddress": "string",
"userAgent": "string",
"requestId": "string",
"remotePort": "string"
},
"eventStatus": "string",
"details": {
"loadBalancerId": "string",
"loadBalancerName": "string",
"type": "string",
"time": "string",
"clientIp": "string",
"clientPort": "string",
"backendIp": "string",
"backendPort": "string",
"backendGroupId": "string",
"backendName": "string",
"requestProcessingTimes": {
"requestProcessingTime": "string",
"requestRxTime": "string",
"requestTxTime": "string",
"backendResponseTime": "string",
"backendProcessingTime": "string",
"responseProcessingTime": "string",
"responseRxTime": "string",
"responseTxTime": "string",
"responseStartTime": "string",
"requestTime": "string"
},
"errorDetails": "string",
"tlsVersion": "string",
"cipherSuite": "string",
"sniHostname": "string",
"serverCertificateSubject": "string",
"clientCertificateSubject": "string",
"upstreamTransportFailureReason": "string",
"bytesSent": "string",
"bytesReceived": "string",
"responseFlags": {
"failedLocalHealthcheck": "boolean",
"noHealthyUpstream": "boolean",
"upstreamRequestTimeout": "boolean",
"localReset": "boolean",
"upstreamRemoteReset": "boolean",
"upstreamConnectionFailure": "boolean",
"upstreamConnectionTermination": "boolean",
"upstreamOverflow": "boolean",
"noRouteFound": "boolean",
"delayInjected": "boolean",
"faultInjected": "boolean",
"rateLimited": "boolean",
"unauthorizedDetails": {
"reason": "string"
},
"rateLimitServiceError": "boolean",
"downstreamConnectionTermination": "boolean",
"upstreamRetryLimitExceeded": "boolean",
"streamIdleTimeout": "boolean",
"invalidEnvoyRequestHeaders": "boolean",
"downstreamProtocolError": "boolean",
"upstreamMaxStreamDurationReached": "boolean",
"responseFromCacheFilter": "boolean",
"noFilterConfigFound": "boolean",
"durationTimeout": "boolean",
"upstreamProtocolError": "boolean",
"noClusterFound": "boolean",
"overloadManager": "boolean",
"dnsResolutionFailure": "boolean",
"downstreamRemoteReset": "boolean"
},
"upstreamHost": "string",
"upstreamTimings": {
"firstTxByte": "string",
"lastTxByte": "string",
"firstRxByte": "string",
"lastRxByte": "string"
},
"downstreamTimings": {
"firstTxByte": "string",
"lastTxByte": "string",
"firstRxByte": "string",
"lastRxByte": "string"
},
"duration": "string"
}
}
Field description
|
Field |
Description |
|
eventId |
string |
|
eventSource |
string |
|
eventType |
string |
|
eventTime |
string (date-time) String in RFC3339 To work with values in this field, use the APIs described in the |
|
authentication |
|
|
resourceMetadata |
|
|
requestMetadata |
|
|
eventStatus |
enum (EventStatus)
|
|
details |
IamAuthentication
|
Field |
Description |
|
authenticated |
boolean |
|
subjectType |
enum (IamSubjectType)
|
|
subjectId |
string |
|
subjectName |
string |
|
federationId |
string |
|
federationName |
string |
|
federationType |
enum (FederationType)
|
|
tokenInfo |
IamTokenInfo
|
Field |
Description |
|
maskedIamToken |
string |
|
iamTokenId |
string |
|
impersonatorId |
string |
|
impersonatorType |
enum (IamSubjectType)
|
|
impersonatorName |
string |
|
impersonatorFederationId |
string |
|
impersonatorFederationName |
string |
|
impersonatorFederationType |
enum (FederationType)
|
ResourceMetadata
|
Field |
Description |
|
path[] |
Resource
|
Field |
Description |
|
resourceType |
string |
|
resourceId |
string |
|
resourceName |
string |
RequestMetadata
|
Field |
Description |
|
remoteAddress |
string |
|
userAgent |
string |
|
requestId |
string |
|
remotePort |
string (int64) |
EventDetails
|
Field |
Description |
|
loadBalancerId |
string |
|
loadBalancerName |
string |
|
type |
string |
|
time |
string (date-time) String in RFC3339 To work with values in this field, use the APIs described in the |
|
clientIp |
string |
|
clientPort |
string (int64) |
|
backendIp |
string |
|
backendPort |
string (int64) |
|
backendGroupId |
string |
|
backendName |
string |
|
requestProcessingTimes |
|
|
errorDetails |
string |
|
tlsVersion |
string |
|
cipherSuite |
string |
|
sniHostname |
string |
|
serverCertificateSubject |
string |
|
clientCertificateSubject |
string |
|
upstreamTransportFailureReason |
string |
|
bytesSent |
string (int64) |
|
bytesReceived |
string (int64) |
|
responseFlags |
|
|
upstreamHost |
string |
|
upstreamTimings |
|
|
downstreamTimings |
|
|
duration |
string (duration) |
RequestProcessingTimes
|
Field |
Description |
|
requestProcessingTime |
string (duration) |
|
requestRxTime |
string (duration) |
|
requestTxTime |
string (duration) |
|
backendResponseTime |
string (duration) |
|
backendProcessingTime |
string (duration) |
|
responseProcessingTime |
string (duration) |
|
responseRxTime |
string (duration) |
|
responseTxTime |
string (duration) |
|
responseStartTime |
string (duration) |
|
requestTime |
string (duration) |
ResponseFlags
|
Field |
Description |
|
failedLocalHealthcheck |
boolean |
|
noHealthyUpstream |
boolean |
|
upstreamRequestTimeout |
boolean |
|
localReset |
boolean |
|
upstreamRemoteReset |
boolean |
|
upstreamConnectionFailure |
boolean |
|
upstreamConnectionTermination |
boolean |
|
upstreamOverflow |
boolean |
|
noRouteFound |
boolean |
|
delayInjected |
boolean |
|
faultInjected |
boolean |
|
rateLimited |
boolean |
|
unauthorizedDetails |
|
|
rateLimitServiceError |
boolean |
|
downstreamConnectionTermination |
boolean |
|
upstreamRetryLimitExceeded |
boolean |
|
streamIdleTimeout |
boolean |
|
invalidEnvoyRequestHeaders |
boolean |
|
downstreamProtocolError |
boolean |
|
upstreamMaxStreamDurationReached |
boolean |
|
responseFromCacheFilter |
boolean |
|
noFilterConfigFound |
boolean |
|
durationTimeout |
boolean |
|
upstreamProtocolError |
boolean |
|
noClusterFound |
boolean |
|
overloadManager |
boolean |
|
dnsResolutionFailure |
boolean |
|
downstreamRemoteReset |
boolean |
Unauthorized
|
Field |
Description |
|
reason |
enum (Reason)
|
Timings
|
Field |
Description |
|
firstTxByte |
string (duration) |
|
lastTxByte |
string (duration) |
|
firstRxByte |
string (duration) |
|
lastRxByte |
string (duration) |