Raw Log File Field Definitions

Each raw log file consists of a set of fields that describe HTTP activity data. The exact set of fields that will be included in your raw log file depends on whether you have configured your raw log file to use the default or combined log file format. Additionally, you can also choose whether a custom field will be included in the raw log file and the header information that will be included.

The fields that can be defined in a raw log file are listed and described below.

If you are using the combined log format, then the field names will not be reported as a header in each raw log file. Learn how fields are ordered for a custom log file format.

Field	Name	Applicable Log Format(s)	Description
-	-	Default	This field always reports "-."
c-ip	Client IP Address	Default Combined	The IP address of the client that made the request to the server.
c-referrer	Referrer	Default Combined	The URL of the site from which the request originated. This field will typically be set to "-."
cs-method	HTTP Method	Default	The type of action that was requested. This field is reported according to the HTTP method (i.e., GET, HEAD, POST, PUT, and DELETE) that was used to make the request.
cs-uri-stem	Request URL	Default Combined	The URL for the CDN content that was requested, posted, or deleted.
c-user-agent	User Agent	Default Combined	The user agent that the client used to perform CDN activity.
customer-id	Customer Account Number	Default	The customer account number through which the request was processed.
filesize	File Size	Default Combined	The size of the requested asset in bytes.
rs-bytes	Remote Server Bytes Sent	Default	The sum of the number of bytes read from both of the following sources: Requesting Client Origin Server
rs-duration	Remote Server Time Taken	Default	The length of time, in milliseconds, that it took the origin server to process the requested action. This field does not take into account network time.
sc-bytes	Bytes Sent	Default	The number of bytes that the edge server sent to the client.
sc-status	Status Code	Default Combined	Syntax: Default log file: CacheStatusCode/HTTPStatusCode Combined log file: HTTPStatusCode Status code definitions: CacheStatusCode: The cache status code (e.g., TCP_HIT) returned by an edge server. HTTPStatusCode: The HTTP status code (e.g., 200) that originated from one of the following: Origin server CAN gateway server Edge server
s-ip	Edge Server IP Address	Default	The IP address associated with the edge server that processed the request.
s-port	Edge Server Port	Default	The port number associated with the edge server that processed the request.
timestamp	Date/Time	Default Combined	The date and time (GMT) at which an edge server delivered the requested content to the client. The format in which date/time is reported is determined by your log file format settings. By default, this field is reported in Unix time. For more information, please refer to the Default Log File Format and Custom Log File Format topics.
time-taken	Time Taken	Default	The length of time, in milliseconds, that it took an edge server to process the requested action. This field does not take into account network time.
x-ec_custom-1	Custom Log Field 1	Default	This is a custom field that can report request and response headers. This field will only appear in a raw log file when the Add this custom field to the log file option is marked. The type of headers that will be logged is determined by the rules that have been associated with each platform.