You can configure a stream to log various metrics called data set parameters or data set fields.

Depending on the log type you choose, you can select from parameters related to the request-response cycle, CDN health and performance metrics, and security data.

This includes data sets for midgress traffic within the Akamai platform, custom log fields, Reporting metrics and dimensions, and data for integrations with other products, such as EdgeWorkers, and fields from Log Delivery Service (LDS) available for EdgeDNS and Global Traffic Management.

To get a list of available parameters, run the List data set fields operation for each log type. For more information on the available stream types, see Log types.

Some fields may not be available depending on the product monitor or the log type (CDN, Edge DNS, EdgeWorkers, Global Traffic Manager) you choose. For example, Web security and EdgeWorkers information data set fields are not supported for the Cloud Wrapper products.

In JSON logs, fields reported as - or null are omitted by default. For the list of parameters and fields available for each log type, see the tables below. If you're looking for sample logs with actual data, see Log format.

Delivery fields

Here's the list of data set fields available for delivery (CDN) streams, for example, when you Create a CDN stream or Edit a CDN stream:

Data set field ID	Field name	Data type	Description
999	Stream ID	string	The unique identifier of the stream that handled the request.
1000	CP code	string	The Content Provider code associated with the request.
1002	Request ID	string	The identifier of the request.
1005	Bytes	integer	The content bytes served in the response body. For HTTP/2, this includes overhead bytes.
1006	Client IP	string	The IPv4 or IPv6 address of the requesting client.
1008	HTTP status code	integer	The HTTP status code of the response.
1009	Protocol type	string	The scheme of the request-response cycle, either HTTP or HTTPS.
1011	Request host	string	The value of the Host header in the request.
1012	Request method	string	The HTTP method of the request.
1013	Request path	string	The path to a resource in the request, excluding query parameters.
1014	Request port	integer	The client TCP port number of the requested service.
1015	Response Content-Length	integer	The size of the entity-body in bytes returned to the client.
1016	Response Content-Type	string	The type of the content returned to the client.
1017	User-Agent	string	The URI-encoded user agent making the request.
1019	Accept-Language	string	The list of languages acceptable in the response.
1023	Cookie	string	A list of HTTP cookies previously sent by the server with the Set-Cookie header.
1031	Range	string	The part of an entity that the server is requested to return.
1032	Referer	string	The address of the resource from which the requested URL was followed.
1037	X-Forwarded-For	string	The originating IP address of a client connecting to a web server through an HTTP proxy or load balancer.
1033	Request end time	integer	The time in milliseconds it takes the edge server to fully read the request.
1066	Edge IP	string	The IP address of the edge server that served the response to the client. This is useful when resolving issues with your account representative.
1068	Error code	string	A string describing the problem with serving the request.
1100	Request time	integer	The time when the edge server accepted the request from the client.
1102	Turn around time	integer	The time in milliseconds from when the edge server receives the last byte of the request to when it sends the first bytes of the response.
1103	Transfer time	integer	The time in milliseconds from when the edge server is ready to send the first byte of the response to when the last byte reaches the kernel.
2001	TLS overhead time	integer	The time in milliseconds between when the edge server accepts the connection and the completion of the SSL handshake.
2002	TLS version	integer	The protocol of the TLS handshake, either TLSv1.2 or TLSv1.3.
2003	Object size	integer	The size of the object, excluding HTTP response headers.
2004	Uncompressed size	integer	The size of the uncompressed object, if zipped before sending to the client.
2005	Max-Age	integer	The time in seconds that the object is valid for positive cache responses.
2006	Overhead bytes	integer	TCP overhead in bytes for the request and response, without HTTP or UDP overhead.
2007	DNS lookup time	integer	The time in seconds between the start of the request and the completion of the DNS lookup, if one was required.
2008	Total bytes	integer	The total bytes served in the response, including content and HTTP overhead.
2009	Query string	string	The query string in the incoming URL from the client. To monitor this parameter in your logs, you need to update your property configuration to set the Cache Key Query Parameters behavior to include all parameters.
2010	Cache status	integer	Returns `0` if there was no object in the cache, and `1` if the object was present in the cache. In the event of negatively cached errors or stale content, the object is served from upstream even if cached.
2012	Country/Region	string	The ISO code of the country or region where the request originated.
2013	State	string	The state where the request originated.
2014	City	string	The city where the request originated.
2019	Cacheable	string	Returns `1` if the object is cacheable based on response headers and metadata, `0` if the object is not cacheable.
2020	Breadcrumbs	string	Returns additional breadcrumbs data about the HTTP request-response cycle for improved visibility into the Akamai platform, such as the IP of the node or host, component (cache parent, edge host, peer host, origin, or Cloud Wrapper), request end, turnaround and DNS lookup time. This field is available only for Adaptive Media Delivery, Download Delivery, Object Delivery, Dynamic Site Accelerator, Ion Standard, Ion Premier, and API Acceleration products. To log this parameter for Dynamic Site Accelerator, Ion Standard, and API Acceleration, you need to enable the `breadcrumbs` behavior in your stream's property configuration. See Breadcrumbs in the Property Manager guide.
2021	Last byte	integer	The last byte of the object that was served in this response. `0` indicates a part of a byte-range response. This field is available for all products supported by DataStream 2.
2022	Asnum	string	Returns a string with a single Autonomous System Number (ASN) or a colon-separated list of integers, if multiple ASNs are returned for the request's IP address.
2023	File size bucket	string	This field groups the response content into different buckets by size in kilobytes, megabytes and gigabytes.
2024	Edge attempts	integer	The number of attempts to download the content from the edge in a specific time interval, based on the number of total manifest requests received.
2025	Time to first byte	integer	The time taken to download the first byte of the received content in milliseconds.
2026	Startup errors	integer	The number of download initiation failures in a specific time interval.
2027	Download time	integer	The time taken to download the object in milliseconds.
2028	Throughput	integer	The byte transfer rate for the selected time interval in kilobits per second.
2050	Security rules	string	Returns data on security policy ID, non-deny and deny rules when the request triggers any configured WAF or Bot Manager rules. Requires configuring the Web Application Firewall (WAF) behavior in Property Manager or adding hostnames in Security Configurations.
2052	Server country/region	string	The ISO code of the country or region from where the request was served.
2053	Billing region	string	The Akamai geographical price zone from where the request was served.
2060	Brotli status	string	This field reports the status when serving a Brotli-compressed object. This field is available only for Ion Standard, Ion Premier and Ion Media Advanced products. See Brotli status in the DataStream user guide for details.
2061	Origin Content-Length	integer	The compressible Content-Length object value (in bytes) in the response header from the origin. This field is available only for Ion Standard, Ion Premier and Ion Media Advanced products.
2062	Download Initiated	integer	The number of successful download initiations in a specific time interval.
2063	Download Completed	integer	The number of complete successful downloads.
2080	CMCD	string	Returns a Common Media Client Data (CMCD) payload with detailed data on media traffic. This field is available only for the Adaptive Media Delivery product. See Common Media Client Data in the DataStream user guide for details.
2081	Delivery type	integer	Limits logged data to a specific media delivery type, such as live, VOD (video on demand), or default: `3` - Download Delivery `2` - Adaptive Media Delivery VOD `1` - Adaptive Media Delivery Live `0` - default type
2082	Delivery format	integer	Reports the logged data's media delivery format, such as HDS and HLS fragmentation, HDS and HLS stream packaging, Dynamic Adaptive Streaming over HTTP (DASH), Microsoft Smooth streaming etc., including the default format: `4` - DASH `3` - SILVERLIGHT `2` - ZERI `1` - IPHONE `0` - default format
2083	Media encryption	integer	Returns `1` if media encryption is enabled for the content delivered from the edge to the client.
2084	Prefetch midgress hits	integer	Returns `1` if an edge server prefetched the content from a parent edge server other than the origin.
3000	EdgeWorkers usage	string	Returns EdgeWorkers data for client requests and responses if EdgeWorkers is enabled. The field format is: `//[EdgeWorkers-Id]/[Version]/[Event Handler]/[Off Reason]/[Logic Executed]/[Status]/#[Metrics]`.
3001	EdgeWorkers execution	string	Returns EdgeWorkers execution information if enabled, including the stage of execution, the EdgeWorker ID, process, total and total stage time (in milliseconds), used memory (in kilobytes), ghost flow, error code, HTTP status change when the response is generated using the API, CPU flits consumed during processing, tier ID for the request, indirect CPU time (in milliseconds) and ghost error code.
3011	Content protection information	string	Returns Enhanced Proxy Detection data, including the GeoGuard category, and the action EPD performed on the request. See Reporting metrics and dimensions for details.
1082	Custom field	N/A	The data specified in the Custom Log Field of the Log Requests Details that you want to receive in the stream. See Custom log field.

Edge DNS fields

When you Create an Edge DNS stream or Edit an Edge DNS stream, you can choose from the data set fields you may know from Log Delivery Service (LDS):

Data set field ID	Field name	Data type	Description
4002	Epoch timestamp	string	The Unix epoch timestamp of the log entry and its transaction.
4003	Date	string	The UTC date for log entry and its transaction.
4004	Resolver IP	string	The IP address of the DNS resolver making the request.
4005	Request port	integer	The port number of the DNS resolver making the request.
4006	Request name	string	The query name of the request.
4007	Class	string	The DNS class of the request.
4008	Request type	string	The request's DNS record type.
4009	EDNS0 flag	string	The EDNS0 Client Subnet (ECS) indicator, either `E` or blank.
4010	EDNS0 size	integer	The ECS field size in bytes.
4011	DNSSEC flag	string	The DNSSEC indicator, either `D` or blank.
4012	TCP flag	string	The TCP indicator, either `T` or blank.
4013	Answers	string	The request answers for a request query name.
4014	Time	string	The UTC time for log entry and its transaction.

EdgeWorkers fields

When you Create an EdgeWorkers stream or Edit an EdgeWorkers stream, each stream comes with the following fields by default. They correspond to the OpenTelemetry (OTel) format log fields:

Data set field ID	Field name	Data type	Description
6000	Time	string	The Unix epoch timestamp when the event occurred, measured by the origin clock, i.e. the time at the source.
6001	Format	integer	A version number that specifies the log line's format for accurate parsing. In case additional fields need to be added, the version number can be used to determine how to parse. The initial value is `1`.
6002	DS2id	integer	The DataStream 2 stream ID. You can use this value for several operations such as Get a stream.
6003	Severity	string	Indicates the event's severity level. For details on each status, check the Range name column in the OTel Logs Data Model guide.
6004	TraceId	integer	The request's trace ID as defined in W3C Trace Context. Returns `-` if not present.
6005	SpanId	integer	The span ID for logs that belong to a particular processing span.
6006	Traceflags	string	The request's trace flag, either `SAMPLED` or `-`.
6007	Resource	string	Describes the source of the logged event in a comma-delimited name and value pair.
6008	Attributes	string	Additional information about the specific event occurrence. Can contain information about the request context in a comma-delimited name and value pair.
6009	Body	string	The URL-encoded body of the log record, such as a human-readable string message describing the event in a free form or a structured data composed of arrays and maps of other values.

Global Traffic Management fields

When you Create a GTM stream or Edit a Global Traffic Management stream, you can choose from the data set fields you may know from Log Delivery Service (LDS):

Data set field ID	Field name	Data type	Description
5002	Epoch timestamp	string	The Unix epoch timestamp of the log entry and its transaction.
5003	Date	string	The UTC date for log entry and its transaction.
5004	Resolver IP	string	The IP address of the DNS resolver making the request.
5005	Request port	integer	The port number of the DNS resolver making the request.
5006	Request name	string	The query name of the request.
5007	Class	string	The DNS class of the request.
5008	Request type	string	The request's DNS record type.
5009	EDNS0 flag	string	The EDNS0 Client Subnet (ECS) indicator, either `E` or blank.
5010	EDNS0 size	integer	The ECS field size in bytes.
5011	DNSSEC flag	string	The DNSSEC indicator, either `D` or blank.
5012	TCP flag	string	The TCP indicator, either `T` or blank.
5013	Answers	string	The request answers for a request query name.

Midgress traffic

You can use DataStream 2 to log midgress traffic on your property, such as between two Akamai edge servers. Using the Create a stream or Edit a stream operations, set the collectMidgress member to true, and go to Property Manager to enable the Collect midgress traffic option in the DataStream behavior for your property. As a result, the second place in the log line contains a numeric value:

0, if the request was processed between the client device and edge server (CLIENT_REQ), and isn't logged as midgress traffic
1, if the request was processed by an edge server within the region (PEER_REQ), and is logged as midgress traffic
2, if the request was processed by a parent Akamai edge server in the parent-child hierarchy (CHILD_REQ), and is logged as midgress traffic

When you enable logging midgress traffic from your stream, the Get a stream operation returns the collectMidgress member as true and lists the isMidgress data set field together with other data set fields you log in the stream. If the logging midgress traffic feature is not enabled on your contract, contact the Akamai support team.