Application Load Balancer Audit Trails Events: LoadBalancerHTTPAccessLog
Event JSON schema
{
"eventId": "string",
"eventSource": "string",
"eventType": "string",
"eventTime": "string",
"authentication": {
"authenticated": "boolean",
"subjectType": "string",
"subjectId": "string",
"subjectName": "string",
"federationId": "string",
"federationName": "string",
"federationType": "string",
"tokenInfo": {
"maskedIamToken": "string",
"iamTokenId": "string",
"impersonatorId": "string",
"impersonatorType": "string",
"impersonatorName": "string",
"impersonatorFederationId": "string",
"impersonatorFederationName": "string",
"impersonatorFederationType": "string"
}
},
"resourceMetadata": {
"path": [
{
"resourceType": "string",
"resourceId": "string",
"resourceName": "string"
}
]
},
"requestMetadata": {
"remoteAddress": "string",
"userAgent": "string",
"requestId": "string",
"remotePort": "string"
},
"eventStatus": "string",
"error": {
"code": "integer",
"message": "string",
"details": [
"object"
]
},
"details": {
"loadBalancerId": "string",
"loadBalancerName": "string",
"type": "string",
"time": "string",
"httpMethod": "string",
"authority": "string",
"requestUri": "string",
"httpStatus": "string",
"httpVersion": "string",
"rewrittenRequestUri": "string",
"referer": "string",
"requestContentType": "string",
"responseContentType": "string",
"grpcService": "string",
"grpcMethod": "string",
"clientIp": "string",
"clientPort": "string",
"backendIp": "string",
"backendPort": "string",
"httpRouterId": "string",
"virtualHostName": "string",
"routeName": "string",
"backendGroupId": "string",
"backendName": "string",
"requestHeadersBytes": "string",
"requestBodyBytes": "string",
"responseHeadersBytes": "string",
"responseBodyBytes": "string",
"requestProcessingTimes": {
"requestProcessingTime": "string",
"requestRxTime": "string",
"requestTxTime": "string",
"backendResponseTime": "string",
"backendProcessingTime": "string",
"responseProcessingTime": "string",
"responseRxTime": "string",
"responseTxTime": "string",
"responseStartTime": "string",
"requestTime": "string"
},
"errorDetails": "string",
"tlsVersion": "string",
"cipherSuite": "string",
"sniHostname": "string",
"serverCertificateSubject": "string",
"clientCertificateSubject": "string",
"upstreamTransportFailureReason": "string",
"smartwebsecurity": {
"profileId": "string",
"matchedRule": {
"ruleName": "string",
"ruleType": "string",
"verdict": "string",
"dryRun": "boolean",
"wafResponse": {
"profileId": "string",
"ruleIds": [
"string"
],
"exclusionRuleNames": [
"string"
]
}
},
"dryRunMatchedRule": {
"ruleName": "string",
"ruleType": "string",
"verdict": "string",
"dryRun": "boolean",
"wafResponse": {
"profileId": "string",
"ruleIds": [
"string"
],
"exclusionRuleNames": [
"string"
]
}
},
"advancedRateLimiter": {
"profileId": "string",
"verdict": "string",
"appliedQuotaName": "string"
}
},
"responseFlags": {
"failedLocalHealthcheck": "boolean",
"noHealthyUpstream": "boolean",
"upstreamRequestTimeout": "boolean",
"localReset": "boolean",
"upstreamRemoteReset": "boolean",
"upstreamConnectionFailure": "boolean",
"upstreamConnectionTermination": "boolean",
"upstreamOverflow": "boolean",
"noRouteFound": "boolean",
"delayInjected": "boolean",
"faultInjected": "boolean",
"rateLimited": "boolean",
"unauthorizedDetails": {
"reason": "string"
},
"rateLimitServiceError": "boolean",
"downstreamConnectionTermination": "boolean",
"upstreamRetryLimitExceeded": "boolean",
"streamIdleTimeout": "boolean",
"invalidEnvoyRequestHeaders": "boolean",
"downstreamProtocolError": "boolean",
"upstreamMaxStreamDurationReached": "boolean",
"responseFromCacheFilter": "boolean",
"noFilterConfigFound": "boolean",
"durationTimeout": "boolean",
"upstreamProtocolError": "boolean",
"noClusterFound": "boolean",
"overloadManager": "boolean",
"dnsResolutionFailure": "boolean",
"downstreamRemoteReset": "boolean"
},
"clientTraceId": "string",
"upstreamHost": "string",
"upstreamTimings": {
"firstTxByte": "string",
"lastTxByte": "string",
"firstRxByte": "string",
"lastRxByte": "string"
},
"downstreamTimings": {
"firstTxByte": "string",
"lastTxByte": "string",
"firstRxByte": "string",
"lastRxByte": "string"
},
"duration": "string"
}
}
Field description
|
Field |
Description |
|
eventId |
string |
|
eventSource |
string |
|
eventType |
string |
|
eventTime |
string (date-time) String in RFC3339 To work with values in this field, use the APIs described in the |
|
authentication |
|
|
resourceMetadata |
|
|
requestMetadata |
|
|
eventStatus |
enum (EventStatus)
|
|
error |
The error result of the operation in case of failure or cancellation. |
|
details |
IamAuthentication
|
Field |
Description |
|
authenticated |
boolean |
|
subjectType |
enum (IamSubjectType)
|
|
subjectId |
string |
|
subjectName |
string |
|
federationId |
string |
|
federationName |
string |
|
federationType |
enum (FederationType)
|
|
tokenInfo |
IamTokenInfo
|
Field |
Description |
|
maskedIamToken |
string |
|
iamTokenId |
string |
|
impersonatorId |
string |
|
impersonatorType |
enum (IamSubjectType)
|
|
impersonatorName |
string |
|
impersonatorFederationId |
string |
|
impersonatorFederationName |
string |
|
impersonatorFederationType |
enum (FederationType)
|
ResourceMetadata
|
Field |
Description |
|
path[] |
Resource
|
Field |
Description |
|
resourceType |
string |
|
resourceId |
string |
|
resourceName |
string |
RequestMetadata
|
Field |
Description |
|
remoteAddress |
string |
|
userAgent |
string |
|
requestId |
string |
|
remotePort |
string (int64) |
Status
The error result of the operation in case of failure or cancellation.
|
Field |
Description |
|
code |
integer (int32) Error code. An enum value of google.rpc.Code |
|
message |
string An error message. |
|
details[] |
object A list of messages that carry the error details. |
EventDetails
|
Field |
Description |
|
loadBalancerId |
string |
|
loadBalancerName |
string |
|
type |
string |
|
time |
string (date-time) String in RFC3339 To work with values in this field, use the APIs described in the |
|
httpMethod |
string |
|
authority |
string |
|
requestUri |
string |
|
httpStatus |
string (int64) |
|
httpVersion |
string |
|
rewrittenRequestUri |
string |
|
referer |
string |
|
requestContentType |
string |
|
responseContentType |
string |
|
grpcService |
string |
|
grpcMethod |
string |
|
clientIp |
string |
|
clientPort |
string (int64) |
|
backendIp |
string |
|
backendPort |
string (int64) |
|
httpRouterId |
string |
|
virtualHostName |
string |
|
routeName |
string |
|
backendGroupId |
string |
|
backendName |
string |
|
requestHeadersBytes |
string (int64) |
|
requestBodyBytes |
string (int64) |
|
responseHeadersBytes |
string (int64) |
|
responseBodyBytes |
string (int64) |
|
requestProcessingTimes |
|
|
errorDetails |
string |
|
tlsVersion |
string |
|
cipherSuite |
string |
|
sniHostname |
string |
|
serverCertificateSubject |
string |
|
clientCertificateSubject |
string |
|
upstreamTransportFailureReason |
string |
|
smartwebsecurity |
|
|
responseFlags |
|
|
clientTraceId |
string |
|
upstreamHost |
string |
|
upstreamTimings |
|
|
downstreamTimings |
|
|
duration |
string (duration) |
RequestProcessingTimes
|
Field |
Description |
|
requestProcessingTime |
string (duration) |
|
requestRxTime |
string (duration) |
|
requestTxTime |
string (duration) |
|
backendResponseTime |
string (duration) |
|
backendProcessingTime |
string (duration) |
|
responseProcessingTime |
string (duration) |
|
responseRxTime |
string (duration) |
|
responseTxTime |
string (duration) |
|
responseStartTime |
string (duration) |
|
requestTime |
string (duration) |
Smartwebsecurity
|
Field |
Description |
|
profileId |
string |
|
matchedRule |
|
|
dryRunMatchedRule |
|
|
advancedRateLimiter |
MatchedRule
|
Field |
Description |
|
ruleName |
string |
|
ruleType |
string |
|
verdict |
string |
|
dryRun |
boolean |
|
wafResponse |
WafResponse
|
Field |
Description |
|
profileId |
string |
|
ruleIds[] |
string |
|
exclusionRuleNames[] |
string |
AdvancedRateLimiter
|
Field |
Description |
|
profileId |
string |
|
verdict |
string |
|
appliedQuotaName |
string |
ResponseFlags
|
Field |
Description |
|
failedLocalHealthcheck |
boolean |
|
noHealthyUpstream |
boolean |
|
upstreamRequestTimeout |
boolean |
|
localReset |
boolean |
|
upstreamRemoteReset |
boolean |
|
upstreamConnectionFailure |
boolean |
|
upstreamConnectionTermination |
boolean |
|
upstreamOverflow |
boolean |
|
noRouteFound |
boolean |
|
delayInjected |
boolean |
|
faultInjected |
boolean |
|
rateLimited |
boolean |
|
unauthorizedDetails |
|
|
rateLimitServiceError |
boolean |
|
downstreamConnectionTermination |
boolean |
|
upstreamRetryLimitExceeded |
boolean |
|
streamIdleTimeout |
boolean |
|
invalidEnvoyRequestHeaders |
boolean |
|
downstreamProtocolError |
boolean |
|
upstreamMaxStreamDurationReached |
boolean |
|
responseFromCacheFilter |
boolean |
|
noFilterConfigFound |
boolean |
|
durationTimeout |
boolean |
|
upstreamProtocolError |
boolean |
|
noClusterFound |
boolean |
|
overloadManager |
boolean |
|
dnsResolutionFailure |
boolean |
|
downstreamRemoteReset |
boolean |
Unauthorized
|
Field |
Description |
|
reason |
enum (Reason)
|
Timings
|
Field |
Description |
|
firstTxByte |
string (duration) |
|
lastTxByte |
string (duration) |
|
firstRxByte |
string (duration) |
|
lastRxByte |
string (duration) |