Log Encyclopedia

CloudFront Access Log

Amazon CloudFront standard log with header comments and dozens of edge metrics.

Category: CDN

Regex Pattern

^(?<date>\d{4}-\d{2}-\d{2})\s+(?<time>\d{2}:\d{2}:\d{2})\s+(?<x_edge_location>\S+)\s+(?<sc_bytes>\d+)\s+(?<c_ip>\S+)\s+(?<cs_method>\S+)\s+(?<cs_host>\S+)\s+(?<cs_uri_stem>\S+)\s+(?<sc_status>\d{3})\s+(?<cs_referer>\S+)\s+(?<cs_user_agent>\S+)\s+(?<cs_uri_query>\S*)\s+(?<cs_cookie>\S*)\s+(?<x_edge_result_type>\S+)\s+(?<x_edge_request_id>\S+)\s+(?<x_host_header>\S+)\s+(?<cs_protocol>\S+)\s+(?<cs_bytes>\d+)\s+(?<time_taken>\S+)\s+(?<x_forwarded_for>\S*)\s+(?<ssl_protocol>\S*)\s+(?<ssl_cipher>\S*)\s+(?<x_edge_response_result_type>\S+)$

DuckDB Schema

date VARCHAR, time VARCHAR, x_edge_location VARCHAR, sc_bytes BIGINT, c_ip VARCHAR, cs_method VARCHAR, cs_host VARCHAR, cs_uri_stem VARCHAR, sc_status INTEGER, cs_referer VARCHAR, cs_user_agent VARCHAR, cs_uri_query VARCHAR, cs_cookie VARCHAR, x_edge_result_type VARCHAR, x_edge_request_id VARCHAR, x_host_header VARCHAR, cs_protocol VARCHAR, cs_bytes BIGINT, time_taken DOUBLE, x_forwarded_for VARCHAR, ssl_protocol VARCHAR, ssl_cipher VARCHAR, x_edge_response_result_type VARCHAR

Ready to analyze?

Click below to open the local DuckDB tool preloaded for CloudFront Access Log.

Analyze Now (Local & Private)Prefilled SQL: SELECT * FROM log_table LIMIT 200;

Common CloudFront Access Log Errors

Investigate frequent error signatures without leaving the browser.

Error 504