|
| 1 | +# Azure Logs |
| 2 | + |
| 3 | +The translator for Azure logs receives azure resource logs as raw data and extracts the logs in OpenTelemetry format. |
| 4 | + |
| 5 | +Currently, it expects the azure resource logs to be coming from event hub. |
| 6 | + |
| 7 | +### Azure CDN Access Logs |
| 8 | + |
| 9 | +The mapping for this category is as follows: |
| 10 | + |
| 11 | +| Original Field (JSON) | Log Record Attribute | |
| 12 | +|-------------------------|---------------------------------------------------------------------------------------------------------------------------------------| |
| 13 | +| `trackingReference` | `azure.ref` | |
| 14 | +| `httpMethod` | `http.request.method` | |
| 15 | +| `httpVersion` | `network.protocol.version` | |
| 16 | +| `requestUri` | `url.orginal`<br>Also parses it to get fields:<br>1.`url.scheme`<br>2.`url.fragment`<br>3.`url.query`<br>4.`url.path`<br>5.`url.port` | |
| 17 | +| `sni` | `tls.server.name` | |
| 18 | +| `requestBytes` | `http.request.size` | |
| 19 | +| `responseBytes` | `http.response.size` | |
| 20 | +| `userAgent` | `user_agent.original` | |
| 21 | +| `clientIp` | `client.address` | |
| 22 | +| `clientPort` | `client.port` | |
| 23 | +| `socketIp` | `source.address` | |
| 24 | +| `timeToFirstByte` | `azure.time_to_first_byte` | |
| 25 | +| `timeTaken` | `duration` | |
| 26 | +| `requestProtocol` | `network.protocol.name` | |
| 27 | +| `securityProtocol` | 1. `tls.protocol.name`<br>2. `tls.protocol.version` | |
| 28 | +| `httpStatusCode` | `http.response.status_code` | |
| 29 | +| `pop` | `azure.pop` | |
| 30 | +| `cacheStatus` | `azure.cache_status` | |
| 31 | +| `errorInfo` | `exception.type` | |
| 32 | +| `ErrorInfo` | Same as `errorInfo` | |
| 33 | +| `endpoint` | Either:<br>1. `destination.address` if it is equal to `backendHostname`<br>2. `network.peer.address` otherwise. | |
| 34 | +| `isReceivedFromClient` | `network.io.direction`<br>- If `true`, `receive`<br>- Else, `transmit` | |
| 35 | +| `backendHostname` | 1. `destination.address` <br>2. `destination.port`, if any | |
0 commit comments