You can configure a data stream to collect these parameters. To get a list of available parameters, you can run the List data set fields operation.

📘

Edge DNS and GTM logs

With the recent limited availability (LA) release of DataStream 2.1, you can now create streams for Edge DNS and Global Traffic Management as data sources.

For fields you can log in these streams, see Data set parameters in the DataStream 2 API v3 guide.

Some data sets may not be available for logging depending on the product enabled for the property you want to monitor. For example, Web security and EdgeWorkers information data set fields are not supported for the Cloud Wrapper products.

In JSON logs, fields reported as - or null are omitted by default. If you're looking for sample logs (JSON and structured) with data, see Log format.

Data set field IDField nameData typeDescription
999Stream IDstringThe unique identifier of the stream that handled the request.
1000CP codestringThe Content Provider code associated with the request.
1002Request IDstringThe identifier of the request.
1005BytesintegerThe content bytes served in the response body. For HTTP/2, this includes overhead bytes.
1006Client IPstringThe IPv4 or IPv6 address of the requesting client.
1008HTTP status codeintegerThe HTTP status code of the response.
1009Protocol typestringThe scheme of the request-response cycle, either HTTP or HTTPS.
1011Request hoststringThe value of the Host header in the request.
1012Request methodstringThe HTTP method of the request.
1013Request pathstringThe path to a resource in the request, excluding query parameters.
1014Request portintegerThe client TCP port number of the requested service.
1015Response Content-LengthintegerThe size of the entity-body in bytes returned to the client.
1016Response Content-TypestringThe type of the content returned to the client.
1017User-AgentstringThe URI-encoded user agent making the request.
1019Accept-LanguagestringThe list of languages acceptable in the response.
1023CookiestringA list of HTTP cookies previously sent by the server with the Set-Cookie header.
1031RangestringThe part of an entity that the server is requested to return.
1032RefererstringThe address of the resource from which the requested URL was followed.
1037X-Forwarded-ForstringThe originating IP address of a client connecting to a web server through an HTTP proxy or load balancer.
1033Request end timeintegerThe time in milliseconds it takes the edge server to fully read the request.
1066Edge IPstringThe IP address of the edge server that served the response to the client. This is useful when resolving issues with your account representative.
1068Error codestringA string describing the problem with serving the request.
1100Request timeintegerThe time when the edge server accepted the request from the client.
1102Turn around timeintegerThe time in milliseconds from when the edge server receives the last byte of the request to when it sends the first bytes of the response.
1103Transfer timeintegerThe time in milliseconds from when the edge server is ready to send the first byte of the response to when the last byte reaches the kernel.
2001TLS overhead timeintegerThe time in milliseconds between when the edge server accepts the connection and the completion of the SSL handshake.
2002TLS versionintegerThe protocol of the TLS handshake, either TLSv1.2 or TLSv1.3.
2003Object sizeintegerThe size of the object, excluding HTTP response headers.
2004Uncompressed sizeintegerThe size of the uncompressed object, if zipped before sending to the client.
2005Max-AgeintegerThe time in seconds that the object is valid for positive cache responses.
2006Overhead bytesintegerTCP overhead in bytes for the request and response, without HTTP or UDP overhead.
2007DNS lookup timeintegerThe time in seconds between the start of the request and the completion of the DNS lookup, if one was required.
2008Total bytesintegerThe total bytes served in the response, including content and HTTP overhead.
2009Query stringstringThe query string in the incoming URL from the client. To monitor this parameter in your logs, you need to update your property configuration to set the Cache Key Query Parameters behavior to include all parameters.
2010Cache statusintegerReturns 0 if there was no object in the cache, and 1 if the object was present in the cache. In the event of negatively cached errors or stale content, the object is served from upstream even if cached.
2012Country/RegionstringThe ISO code of the country or region where the request originated.
2013StatestringThe state where the request originated.
2014CitystringThe city where the request originated.
2019CacheablestringReturns 1 if the object is cacheable based on response headers and metadata, 0 if the object is not cacheable.
2020BreadcrumbsstringReturns additional breadcrumbs data about the HTTP request-response cycle for improved visibility into the Akamai platform, such as the IP of the node or host, component (cache parent, edge host, peer host, origin, or Cloud Wrapper), request end, turnaround and DNS lookup time. This field is available only for Adaptive Media Delivery, Download Delivery, Object Delivery, Dynamic Site Accelerator, Ion Standard, Ion Premier, and API Acceleration products.

To log this parameter for Dynamic Site Accelerator, Ion Standard, and API Acceleration, you need to enable the breadcrumbs behavior in your stream's property configuration. See Breadcrumbs in the Property Manager guide.
2021Last byteintegerThe last byte of the object that was served in this response. 0 indicates a part of a byte-range response. This field is available for all products supported by DataStream 2.
2022AsnumstringReturns a string with a single Autonomous System Number (ASN) or a colon-separated list of integers, if multiple ASNs are returned for the request's IP address.
2023File size bucketstringThis field groups the response content into different buckets by size in kilobytes, megabytes and gigabytes.
2024Edge attemptsintegerThe number of attempts to download the content from the edge in a specific time interval, based on the number of total manifest requests received.
2025Time to first byteintegerThe time taken to download the first byte of the received content in milliseconds.
2026Startup errorsintegerThe number of download initiation failures in a specific time interval.
2027Download timeintegerThe time taken to download the object in milliseconds.
2028ThroughputintegerThe byte transfer rate for the selected time interval in kilobits per second.
2050Security rulesstringReturns data on security policy ID, non-deny and deny rules when the request triggers any configured WAF or Bot Manager rules. Requires configuring the Web Application Firewall (WAF) behavior in Property Manager or adding hostnames in Security Configurations.
2052Server country/regionstringThe ISO code of the country or region from where the request was served.
2053Billing regionstringThe Akamai geographical price zone from where the request was served.
2060Brotli statusstringThis field reports the status when serving a Brotli-compressed object. This field is available only for Ion Standard, Ion Premier and Ion Media Advanced products. See Brotli status in the DataStream user guide for details.
2061Origin Content-LengthintegerThe compressible Content-Length object value (in bytes) in the response header from the origin. This field is available only for Ion Standard, Ion Premier and Ion Media Advanced products.
2062Download InitiatedintegerThe number of successful download initiations in a specific time interval.
2063Download CompletedintegerThe number of complete successful downloads.
2080CMCDstringReturns a Common Media Client Data (CMCD) payload with detailed data on media traffic. This field is available only for the Adaptive Media Delivery product. See Common Media Client Data in the DataStream user guide for details.
2081Delivery typeintegerLimits logged data to a specific media delivery type, such as live, VOD (video on demand), or default:

3 - Download Delivery
2 - Adaptive Media Delivery VOD
1 - Adaptive Media Delivery Live
0 - default type
2082Delivery formatintegerReports the logged data's media delivery format, such as HDS and HLS fragmentation, HDS and HLS stream packaging, Dynamic Adaptive Streaming over HTTP (DASH), Microsoft Smooth streaming etc., including the default format:

4 - DASH
3 - SILVERLIGHT
2 - ZERI
1 - IPHONE
0 - default format
2083Media encryptionintegerReturns 1 if media encryption is enabled for the content delivered from the edge to the client.
2084Prefetch midgress hitsintegerReturns 1 if an edge server prefetched the content from a parent edge server other than the origin.
2085Early hintsstringReturns the Early Hints response details in sub-fields delimited with the | character, in the Number of user-configured URLs or hints | Size of user-configured hints in bytes | Number of Akamai-generated URLs or hints | Size of Akamai-generated hints in bytes format.
3000EdgeWorkers usagestringReturns EdgeWorkers data for client requests and responses if EdgeWorkers is enabled. The field format is: //[EdgeWorkers-Id]/[Version]/[Event Handler]/[Off Reason]/[Logic Executed]/[Status]/#[Metrics].
3001EdgeWorkers executionstringReturns EdgeWorkers execution information if enabled, including the stage of execution, the EdgeWorker ID, process, total and total stage time (in milliseconds), used memory (in kilobytes), ghost flow, error code, HTTP status change when the response is generated using the API, CPU flits consumed during processing, tier ID for the request, indirect CPU time (in milliseconds) and ghost error code.
3011Content protection informationstringReturns Enhanced Proxy Detection data, including the GeoGuard category, and the action EPD performed on the request. See Reporting metrics and dimensions for details.
1082Custom fieldN/AThe data specified in the Custom Log Field of the Log Requests Details that you want to receive in the stream. See Custom log field.

Midgress traffic

You can use DataStream 2 to log midgress traffic on your property, such as between two Akamai edge servers. Using the Create a stream or Edit a stream operations, set the collectMidgress member to true, and go to Property Manager to enable the Collect midgress traffic option in the DataStream behavior for your property. As a result, the second place in the log line contains a numeric value:

  • 0, if the request was processed between the client device and edge server (CLIENT_REQ), and isn't logged as midgress traffic
  • 1, if the request was processed by an edge server within the region (PEER_REQ), and is logged as midgress traffic
  • 2, if the request was processed by a parent Akamai edge server in the parent-child hierarchy (CHILD_REQ), and is logged as midgress traffic​

When you enable logging midgress traffic from your stream, the Get a stream operation returns the collectMidgress member as true and lists the isMidgress data set field together with other data set fields you log in the stream. If the logging midgress traffic feature is not enabled on your contract, contact the Akamai support team.