Log sources and fields

Each event is a row in the ClickHouse logs table. Filter the source column to select a service. The tables below list its fields; a field is not necessarily populated on every event.

id, timestamp, event_message, severity_text, and source are top-level columns. Service fields are string values in log_attributes, even when the original event contains a number or boolean. Use the ClickHouse query field column directly. See Query logs with SQL for casting and field discovery.

Sources#

`source`	Events
`edge_logs`	HTTP requests through the API gateway, including REST and GraphQL
`postgres_logs`	Database activity, statements, and errors
`postgrest_logs`	PostgREST server logs
`auth_logs`	Auth server: login, JWT, OAuth, email
`auth_audit_logs`	Auth audit events
`storage_logs`	Storage API: uploads and object access
`realtime_logs`	Realtime server: channels, presence, broadcast
`function_edge_logs`	HTTP request and response for an Edge Function invocation
`function_logs`	`console` output from inside an Edge Function
`supavisor_logs`	Shared pooler: pooling and timeouts
`pgbouncer_logs`	Dedicated pooler
`pg_upgrade_logs`	Database version upgrade

For postgres_logs, statement text and error details can appear in event_message. A missing structured field does not mean the event has no detail.

Captured HTTP headers#

API Gateway logs capture only the headers below. Other headers still reach the application and client but are omitted from these logs.

Request headers:

accept
cf-connecting-ip
cf-ipcountry
host
user-agent
x-forwarded-proto
referer
content-length
x-real-ip
x-client-info
x-forwarded-user-agent
range
prefer

Response headers:

cf-cache-status
cf-ray
content-location
content-range
content-type
content-length
date
transfer-encoding
x-kong-proxy-latency
x-kong-upstream-latency
sb-gateway-mode
sb-gateway-version

Capture limits#

Hosted Postgres events longer than 100,000 characters and Edge Function log messages longer than 10,000 characters are truncated.
Internal Supabase service connection events are not recorded in hosted Postgres logs.
An Edge Function invocation uses function_edge_logs; its console output uses function_logs.
For API Load Balancer traffic, log_attributes['load_balancer_redirect_identifier'] identifies the upstream database.

Fields by source#

Source: edge_logs

event_messagestring

idstring

identifierstring

schemaidentifier

clickhouselog_attributes['identifier']

load_balancer_redirect_identifierstring

schemametadata.load_balancer_redirect_identifier

clickhouselog_attributes['load_balancer_redirect_identifier']

request.cf.asnnumber

schemametadata.request.cf.asn

clickhouselog_attributes['request.cf.asn']

request.cf.asOrganizationstring

schemametadata.request.cf.asOrganization

clickhouselog_attributes['request.cf.asOrganization']

request.cf.botManagement.corporateProxyboolean

schemametadata.request.cf.botManagement.corporateProxy

clickhouselog_attributes['request.cf.botManagement.corporateProxy']

request.cf.botManagement.detectionIdsnumber[]

schemametadata.request.cf.botManagement.detectionIds

clickhouselog_attributes['request.cf.botManagement.detectionIds']

request.cf.botManagement.ja3Hashstring

schemametadata.request.cf.botManagement.ja3Hash

clickhouselog_attributes['request.cf.botManagement.ja3Hash']

request.cf.botManagement.scorenumber

schemametadata.request.cf.botManagement.score

clickhouselog_attributes['request.cf.botManagement.score']

request.cf.botManagement.staticResourceboolean

schemametadata.request.cf.botManagement.staticResource

clickhouselog_attributes['request.cf.botManagement.staticResource']

request.cf.botManagement.verifiedBotboolean

schemametadata.request.cf.botManagement.verifiedBot

clickhouselog_attributes['request.cf.botManagement.verifiedBot']

request.cf.citystring

schemametadata.request.cf.city

clickhouselog_attributes['request.cf.city']

request.cf.clientTcpRttnumber

schemametadata.request.cf.clientTcpRtt

clickhouselog_attributes['request.cf.clientTcpRtt']

request.cf.clientTrustScorenumber

schemametadata.request.cf.clientTrustScore

clickhouselog_attributes['request.cf.clientTrustScore']

request.cf.colostring

schemametadata.request.cf.colo

clickhouselog_attributes['request.cf.colo']

request.cf.continentstring

schemametadata.request.cf.continent

clickhouselog_attributes['request.cf.continent']

request.cf.countrystring

schemametadata.request.cf.country

clickhouselog_attributes['request.cf.country']

request.cf.edgeRequestKeepAliveStatusnumber

schemametadata.request.cf.edgeRequestKeepAliveStatus

clickhouselog_attributes['request.cf.edgeRequestKeepAliveStatus']

request.cf.httpProtocolstring

schemametadata.request.cf.httpProtocol

clickhouselog_attributes['request.cf.httpProtocol']

request.cf.latitudestring

schemametadata.request.cf.latitude

clickhouselog_attributes['request.cf.latitude']

request.cf.longitudestring

schemametadata.request.cf.longitude

clickhouselog_attributes['request.cf.longitude']

request.cf.metroCodestring

schemametadata.request.cf.metroCode

clickhouselog_attributes['request.cf.metroCode']

request.cf.postalCodestring

schemametadata.request.cf.postalCode

clickhouselog_attributes['request.cf.postalCode']

request.cf.regionstring

schemametadata.request.cf.region

clickhouselog_attributes['request.cf.region']

request.cf.timezonestring

schemametadata.request.cf.timezone

clickhouselog_attributes['request.cf.timezone']

request.cf.tlsCipherstring

schemametadata.request.cf.tlsCipher

clickhouselog_attributes['request.cf.tlsCipher']

request.cf.tlsClientAuth.certPresentedstring

schemametadata.request.cf.tlsClientAuth.certPresented

clickhouselog_attributes['request.cf.tlsClientAuth.certPresented']

request.cf.tlsClientAuth.certRevokedstring

schemametadata.request.cf.tlsClientAuth.certRevoked

clickhouselog_attributes['request.cf.tlsClientAuth.certRevoked']

request.cf.tlsClientAuth.certVerifiedstring

schemametadata.request.cf.tlsClientAuth.certVerified

clickhouselog_attributes['request.cf.tlsClientAuth.certVerified']

request.cf.tlsExportedAuthenticator.clientFinishedstring

schemametadata.request.cf.tlsExportedAuthenticator.clientFinished

clickhouselog_attributes['request.cf.tlsExportedAuthenticator.clientFinished']

request.cf.tlsExportedAuthenticator.clientHandshakestring

schemametadata.request.cf.tlsExportedAuthenticator.clientHandshake

clickhouselog_attributes['request.cf.tlsExportedAuthenticator.clientHandshake']

request.cf.tlsExportedAuthenticator.serverFinishedstring

schemametadata.request.cf.tlsExportedAuthenticator.serverFinished

clickhouselog_attributes['request.cf.tlsExportedAuthenticator.serverFinished']

request.cf.tlsExportedAuthenticator.serverHandshakestring

schemametadata.request.cf.tlsExportedAuthenticator.serverHandshake

clickhouselog_attributes['request.cf.tlsExportedAuthenticator.serverHandshake']

request.cf.tlsVersionstring

schemametadata.request.cf.tlsVersion

clickhouselog_attributes['request.cf.tlsVersion']

request.headers.cf_connecting_ipstring

schemametadata.request.headers.cf_connecting_ip

clickhouselog_attributes['request.headers.cf_connecting_ip']

request.headers.cf_ipcountrystring

schemametadata.request.headers.cf_ipcountry

clickhouselog_attributes['request.headers.cf_ipcountry']

request.headers.cf_raystring

schemametadata.request.headers.cf_ray

clickhouselog_attributes['request.headers.cf_ray']

request.headers.hoststring

schemametadata.request.headers.host

clickhouselog_attributes['request.headers.host']

request.headers.refererstring

schemametadata.request.headers.referer

clickhouselog_attributes['request.headers.referer']

request.headers.x_client_infostring

schemametadata.request.headers.x_client_info

clickhouselog_attributes['request.headers.x_client_info']

request.headers.x_forwarded_protostring

schemametadata.request.headers.x_forwarded_proto

clickhouselog_attributes['request.headers.x_forwarded_proto']

request.headers.x_real_ipstring

schemametadata.request.headers.x_real_ip

clickhouselog_attributes['request.headers.x_real_ip']

request.hoststring

schemametadata.request.host

clickhouselog_attributes['request.host']

request.methodstring

schemametadata.request.method

clickhouselog_attributes['request.method']

request.pathstring

schemametadata.request.path

clickhouselog_attributes['request.path']

request.protocolstring

schemametadata.request.protocol

clickhouselog_attributes['request.protocol']

request.searchstring

schemametadata.request.search

clickhouselog_attributes['request.search']

request.urlstring

schemametadata.request.url

clickhouselog_attributes['request.url']

response.headers.cf_cache_statusstring

schemametadata.response.headers.cf_cache_status

clickhouselog_attributes['response.headers.cf_cache_status']

response.headers.cf_raystring

schemametadata.response.headers.cf_ray

clickhouselog_attributes['response.headers.cf_ray']

response.headers.content_locationstring

schemametadata.response.headers.content_location

clickhouselog_attributes['response.headers.content_location']

response.headers.content_rangestring

schemametadata.response.headers.content_range

clickhouselog_attributes['response.headers.content_range']

response.headers.content_typestring

schemametadata.response.headers.content_type

clickhouselog_attributes['response.headers.content_type']

response.headers.datestring

schemametadata.response.headers.date

clickhouselog_attributes['response.headers.date']

response.headers.sb_gateway_versionstring

schemametadata.response.headers.sb_gateway_version

clickhouselog_attributes['response.headers.sb_gateway_version']

response.headers.transfer_encodingstring

schemametadata.response.headers.transfer_encoding

clickhouselog_attributes['response.headers.transfer_encoding']

response.headers.x_kong_proxy_latencystring

schemametadata.response.headers.x_kong_proxy_latency

clickhouselog_attributes['response.headers.x_kong_proxy_latency']

response.origin_timenumber

schemametadata.response.origin_time

clickhouselog_attributes['response.origin_time']

response.status_codenumber

schemametadata.response.status_code

clickhouselog_attributes['response.status_code']

severity_textString

sourceString

timestampdatetime

Log sources and fields

Sources#

Captured HTTP headers#

Capture limits#

Fields by source#

Is this helpful?

AI Tools