Log Encyclopedia

Amazon CloudFront Standard Log

Edge delivery log containing cache behaviors, edge response time, and viewer IPs.

Category: CDN

Regex Pattern

^(?<date>\S+)\s+(?<time>\S+)\s+(?<edge_location>\S+)\s+(?<bytes_sent>\d+)\s+(?<ip>\S+)\s+(?<method>\S+)\s+(?<host>\S+)\s+(?<uri_stem>\S+)\s+(?<status>\d{3})\s+(?<referer>\S+)\s+(?<user_agent>\S+)\s+(?<uri_query>\S+)\s+(?<cookie>\S+)\s+(?<result_type>\S+)\s+(?<result_id>\S+)\s+(?<host_header>\S+)\s+(?<request_id>\S+)\s+(?<request_bytes>\d+)\s+(?<time_taken>\S+)\s+(?<x_forwarded_for>\S+)\s+(?<ssl_protocol>\S+)\s+(?<ssl_cipher>\S+)\s+(?<response_result_type>\S+)

DuckDB Schema

date VARCHAR, time VARCHAR, edge_location VARCHAR, bytes_sent BIGINT, ip VARCHAR, method VARCHAR, host VARCHAR, uri_stem VARCHAR, status INTEGER, referer VARCHAR, user_agent VARCHAR, uri_query VARCHAR, cookie VARCHAR, result_type VARCHAR, result_id VARCHAR, host_header VARCHAR, request_id VARCHAR, request_bytes BIGINT, time_taken DOUBLE, x_forwarded_for VARCHAR, ssl_protocol VARCHAR, ssl_cipher VARCHAR, response_result_type VARCHAR

Ready to analyze?

Click below to open the local DuckDB tool preloaded for Amazon CloudFront Standard Log.

Analyze Now (Local & Private)Prefilled SQL: SELECT * FROM log_table WHERE status IN ('502', '504', 'EdgeTimeout') LIMIT 200;