Logs Tab

The pool’s Logs tab presents information about pool logs. The data shown is filtered by the time period selected.

Client logs viewed from within a pool are identical to the logs shown within a virtual service, except they are filtered to only show log data specific to the pool. For instance, information such as End to End Timing is only shown from the Service Engine to the servers, rather than from the clients to the servers.

You can view logs within a pool when a virtual service is performing content switching across multiple pools. You can still add a filter for a specific pool within the virtual service logs page, which would then provide complete End to End Timing for connections or requests sent to the specified pool.

Field	Description
Timestamp	Displays date and time of the event.
WAF	Displays WAF status, such as, Passed, Flagged, Rejected or By Passed.
Client IP	Displays the source IP address of the client to which the log entry applies. Note: Client IP is subject to the option Use_True_Client_IP. Client IP can be equal to the source IP from the layer-3 header or equal to the fetched IP from the user-defined HTTP header. For more information, see True Client IP in L7 Security Features topic in the VMware NSX Advanced Load BalancerConfiguration Guide.
URI	Displays the URI path of the request for HTTP-enabled virtual services, such as /index.html.
Request	Displays the type of HTTP method for the request, such as GET, POST, or HEAD.
Response	For HTTP, the response code will be of type 1xx, 2xx, 3xx, 4xx, or 5xx. This is usually a reflection of the response sent by the server, but it may instead be a response created by the NSX Advanced Load Balancer. Expand the log to determine whether the server or the NSX Advanced Load Balancer generated the response.
Length	Displays the size of the response, in Kilobytes.
Duration	Bar shows the total transaction time, which can be used to compare this request to others based on the length of the bar. Hovering the mouse pointer over the bar shows a breakdown of time that makes up the duration of the request. This is a miniature version of the End to End Timing chart that appears when the log is expanded. Expands or collapses a view into logs.