Data sets

Data set fields represent the types of data collected and returned in your log files.

For your data stream settings, in the request body, specify a data set field and add their IDs as a list of the datasetFieldId objects within the datasetFields argument. The order in which you place these determines the order in which they appear in log files.

For fields that require additional behaviors, wait to adjust your property configuration until after data stream creation.
{
  "datasetFields": [
    {
      "datasetFieldId": 1000
    },
    {
      "datasetFieldId": 1002
    },
    {
      "datasetFieldId": 1023
    }
  ]
}

Log information

IDField nameDescription
999Stream IDThe ID for the stream that logged the request data. You can log this field to troubleshoot and group logs between different streams.
1000CP codeThe CP code associated with the request.
1002Request IDThe request ID.
1100Request timeThe time when the edge server accepted the request from the client.
2024Edge attemptsThe number of attempts to download the content from the edge in a specific time interval. Value based on the number of total manifest requests received.

Message exchange data

IDField nameDescription
1005BytesThe content bytes served in the response body. For HTTP/2, this includes overhead bytes.
1006Client IPThe requesting client's IPv4 or IPv6 address.
1008HTTP status codeThe returned HTTP response code.
1009Protocol typeThe request-response scheme, either HTTP or HTTPS.
1011Request hostThe value of the host in the request header.
1012Request methodA request's HTTP method.
1013Request pathThe path to a resource in the request, excluding query parameters.
1014Request portThe client TCP port number of the requested service.
1015Response Content-LengthThe size of the entity-body in bytes returned to the client.
1016Response Content-TypeThe type of the content returned to the client.
1017User-AgentThe URI-encoded user agent making the request.
2001TLS overhead timeThe time in milliseconds between when the edge server accepts the connection and the completion of the SSL handshake.
2002TLS versionThe protocol of the TLS handshake, either TLSv1.2 or TLSv1.3.
2003Object sizeThe size of the object, excluding HTTP response headers.
2004Uncompressed sizeThe size of the uncompressed object if zipped before sending to the client.
2006Overhead bytesTCP overhead in bytes for the request and response.
2008Total bytesThe total bytes served in the response, including content and HTTP overhead.
2009Query stringThe query string in the incoming URL from the client. To monitor this parameter in your logs, you need to update your property configuration to set the cache key query parameters behavior to include all parameters.
2023File size bucketGroups of response content sorted into different buckets by size in kilobytes, megabytes, and gigabytes.
2060Brotli statusThis field reports the status when serving a Brotli-compressed object. This field is available only for Ion Standard, Ion Premier, and Ion Media Advanced products. For details, see Brotli status.
2061Origin Content-LengthThe compressible content-length object value, in bytes, in the response header from the origin. This field is only available for Ion Standard, Ion Premier, and Ion Media Advanced products.
2062Download initiatedThe number of successful download initiations in a specific time interval.
2063Download completedThe number of successful downloads completed.

Request header data

IDField nameDescription
1019Accept-LanguageThe list of languages acceptable in the response.
1023CookieA list of HTTP cookies previously sent by the server with the Set-Cookie header.
1031RangeThe requested entity part returned.
1032RefererThe address of the resource that forwarded the request URL.
1037X-Forwarded-ForThe originating IP address of a client connecting to a web server through an HTTP proxy or load balancer.
2005Max-AgeThe time in seconds a response object is valid for positive cache responses.

Network performance data

IDField nameDescription
1033Request end timeThe time in milliseconds it takes the edge server to fully read the request.
1068Error codeA description detailing the issue with serving a request.
1102Turn around timeThe time in milliseconds from when the edge server receives the last byte of the request to when it sends the first bytes of the response.
1103Transfer timeThe time in milliseconds from when the edge server is ready to send the first byte of the response to when the last byte reaches the kernel.
2007DNS lookup timeThe time in seconds between the start of the request and the completion of the DNS lookup, if one was required. For cached IP addresses, this value is zero.
2021Last byteThe last byte of the object that was served in a response. 0 indicates a part of a byte-range response. This field is available for all products supported by DataStream.
2022AsnumThe Autonomous System Number (ASN) of the request's internet service provider.
2025Time to first byteThe time taken to download the first byte of the received content in milliseconds.
2026Startup errorsThe number of download initiation failures in a specific time interval.
2027Download timeThe time taken to download the object in milliseconds.
2028ThroughputThe byte transfer rate for the selected time interval in kilobits per second.

Cache data

ID Field name Description
2010 Cache status Returns 0 if there was no object in the cache, and 1 if the object was present in the cache. In the event of negatively cached errors or stale content, the object is served from upstream even if cached.
2019 Cacheable Returns 1 if the object is cacheable based on response headers and metadata, and 0 if the object is not cacheable.
2020 Breadcrumbs Returns additional breadcrumbs data about the HTTP request-response cycle for improved visibility into the Akamai platform, such as the IP of the node or host, component, request end, turnaround, and DNS lookup time. This field is available only for Adaptive Media Delivery, Download Delivery, Object Delivery, Dynamic Site Accelerator, Ion Standard, Ion Premier, and API Acceleration products.

To log this parameter for Dynamic Site Accelerator, Ion Standard, and API Acceleration, you need to enable the breadcrumbs behavior in your stream's property configuration. For details, see Breadcrumbs.

Geo data

IDField nameDescription
1066Edge IPThe IP address of the edge server that served the response to the client. This is useful when resolving issues with your account representative.
2012Country/RegionThe ISO code of the country or region where the request originated.
2013StateThe state or province where the request originated.
2014CityThe city where the request originated.
2052Server country/regionThe ISO code of the country or region from where the request was served.
2053Billing regionThe Akamai geographical price zone for where the request was served.

Web security

IDField nameDescription
2050Security rulesReturns data on security policy ID, non-deny, and deny rules when the request triggers any configured WAF or Bot Manager rules. Requires configuring the Web Application Firewall (WAF) behavior in your property or adding hostnames in your security configurations.

EdgeWorkers

IDField nameDescription
3000EdgeWorkers usageReturns EdgeWorkers data for client requests and responses if EdgeWorkers is enabled. The field format is: //[EdgeWorkers-Id]/[Version]/[Event Handler]/[Off Reason]/[Logic Executed]/[Status]/#[Metrics].
3001EdgeWorkers executionReturns EdgeWorkers execution information if enabled, including the stage of execution, the EdgeWorker ID, process, total, and total stage time in milliseconds, used memory (in kilobytes), ghost flow, error code, HTTP status change when the response is generated using the API, CPU flits consumed during processing, tier ID for the request, indirect CPU time (in milliseconds) and ghost error code.

Media

IDField nameDescription
2080CMCDReturns a Common Media Client Data (CMCD) payload with detailed data on media traffic. This field is available only for the Adaptive Media Delivery product. For details, see Common media client data.
2081Delivery typeLimits logged data to a specific media delivery type, such as live or video on demand.
2082Delivery formatReturns 1 if media encryption is enabled for the content delivered from the edge to the client.
2083Media encryptionReturns 1 if an edge server prefetched the content delivered from the edge to the client.

Content protection

IDField nameDescription
3011Content protection informationReturns Enhanced Proxy Detection (EPD) data, including the GeoGuard category and the action EPD performed on the request.

Midgress traffic

IDField nameDescription
2084Prefetch midgress hitsThe midgress traffic within the Akamai network, such as between two edge servers. To use this, enable the collect_midgress_traffic option in the DataStream behavior for your property in Property Manager. As a result, the second slot in the log line returns processing information about a request.

  • 0, if the request was processed between the client device and edge server (CLIENT_REQ), and isn't logged as midgress traffic.

  • 1, if the request was processed by an edge server within the region (PEER_REQ), and is logged as midgress traffic.

  • 2, if the request was processed by a parent Akamai edge server in the parent-child hierarchy (CHILD_REQ), and is logged as midgress traffic​.

Custom fields

IDField nameDescription
1082Custom fieldThe data specified in the custom log field of the log requests details you want to receive in the stream. For details, see Custom log field.