Storage Analytics Log Format

<version-number>

string

The version of Storage Analytics Logging used to record the entry.

1.0

<request-start-time>

timestamp

The time in UTC when the request was received by Storage Analytics.

2011-08-09T21:44:36.2481552Z

<operation-type>

string

The type of REST operation performed. See the Storage Analytics Logged Operations and Status Messages topic for a list of possible operations.

GetBlob

<request-status>

string

The status of the requested operation. See the Storage Analytics Logged Operations and Status Messages topic for a list of possible status messages.

Success

<http-status-code>

string

The HTTP status code for the request. If the request is interrupted, this value may be set to Unknown.

200

<end-to-end-latency-in-ms>

duration

The total time in milliseconds to perform the requested operation, including the time to read the incoming request and send the response to the requester.

39

<server-latency-in-ms>

duration

The total time in milliseconds to perform the requested operation. This value does not include network latency (the time to read the incoming request and send the response to the requester).

22

<authentication-type>

string

Indicates whether the request was authenticated, anonymous, or used Shared Access Signature (SAS).

authenticated

<requester-account-name>

string

The account name making the request, if the request is authenticated. This field will be empty for anonymous and SAS requests.

myaccount

<owner-account-name>

string

The account name of the service owner.

myaccount

<service-type>

string

The requested storage service: blob, table, or queue.

blob

<request-url>

string

The complete URL of the request, in quotes.

"https://myaccount.blob.core.windows.net/mycontainer/2025c44c-d25e-42bf-8507-7a5ca4faa034?timeout=30000"

<requested-object-key>

string

The key of the requested object, in quotes. This field will always use the account name, even if a custom domain name has been configured.

"/myaccount/mycontainer/2025c44c-d25e-42bf-8507-7a5ca4faa034"

<request-id-header>

guid

The request ID assigned by the storage service. This is equivalent to the value of the x-ms-request-id header.

668a4744-7eb3-4e8f-b8d3-fbfd3829715b

<operation-count>

int

The number of each logged operation for a request, using an index of zero. Some requests require more than one operation, such as Copy Blob, though most perform just one operation.

0

<requester-ip-address>

string

The IP address of the requester.

192.100.0.102

<request-version-header>

string

The storage service version specified when the request was made. This is equivalent to the value of the x-ms-version header.

2009-09-19

<request-header-size>

long

The size of the request header, in bytes. If a request is unsuccessful, this value may be empty.

280

<request-packet-size>

long

The size of the request packets read by the storage service, in bytes. If a request is unsuccessful, this value may be empty.

0

<response-header-size>

long

The size of the response header, in bytes. If a request is unsuccessful, this value may be empty.

216

<response-packet-size>

long

The size of the response packets written by the storage service, in bytes. If a request is unsuccessful, this value may be empty.

0

<request-content-length>

long

The value of the Content-Length header for the request sent to the storage service. If the request was successful, this value is equal to <request-packet-size>. If a request is unsuccessful, this value may not be equal to <request-packet-size>, or it may be empty.

0

<request-md5>

string

The value of either the Content-MD5 header or the x-ms-content-md5 header in the request, in quotes. The MD5 hash value specified in this field represents the content in the request. This field can be empty.

"788815fd0198be0d275ad329cafd1830"

<server-md5>

string

The value of the MD5 hash calculated by the storage service, in quotes. This field can be empty.

"3228b3cf1069a5489b298446321f8521"

<etag-identifier>

string

The ETag identifier for the returned object, in quotes.

"datetime'2011-08-09T18%3A09%3A54.9308145Z'"

<last-modified-time>

datetime

The Last Modified Time (LMT) for the returned object, in quotes. This field is empty for operations that can return multiple objects.

Tuesday, 09-Aug-11 21:13:26 GMT

<conditions-used>

string

A semicolon-separated list in the form of ConditionName=value, in quotes. ConditionName can be one of the following conditions:

• If-Modified-Since
  
  
• If-Unmodified-Since
  
  
• If-Match
  
  
• If-None-Match
  
  

"If-Modified-Since=Friday, 05-Aug-11 19:11:54 GMT"

<user-agent-header>

string

The User-Agent header value, in quotes.

“Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)”

<referrer-header>

string

The Referer header value, in quotes.

"http://contoso.com/about.html"

<client-request-id>

string

The x-ms-client-request-id header value included in the request, in quotes.

"8/9/2011 9:44:36 PM 45ef1c0f-8c71-4153-bc88-38589f63fbfc"