User access log analysis reports

Prerequisites

SLS is activated.

Report categories

Procedure

1. Log on to the DCDN console.

2. In the navigation pane, click Logs > Real-time Logs.

3. On the Real-time Log page, click Analytics and Alerting for the appkey that you want to query. You are redirected to the dashboard in the SLS console. This page displays the predefined analysis reports for the selected log type.

   

4. On the dashboard in the SLS console, click Time Range to select a time range for your query.

5. Click Refresh and select a refresh interval. You can select Once or click Auto-refresh.

6. You can select a Domain Name, URI, or IP from the drop-down lists. Different combinations render different analysis reports.

   Note

   One log entry represents one access request.

   Module	Dimension	Displayed Result
   Basic Information	Total PVs	Total number of access requests.
   	Total UVs	Total number of unique IP addresses that sent access requests.
   	Request Error Percentage	Percentage of failed requests. Note Request error percentage = Total number of status codes greater than or equal to 400 / Total number of logs.
   Data Distribution and Trends	PV Distribution	Displayed on a map of China or the world. Hover over a specific area to view the area name and the number of access requests during that time period.
   	PV Trend (5 minutes)	Change in PVs on a specified date, aggregated at 5-minute intervals.
   Top Data	Top 10 URIs	Lists domain names, URIs, and access request counts.
   	Top 10 IPs	Lists IP addresses and access request counts.
   Error Information	Error Code Trend	A dual-line trend graph showing all status codes of 400 or greater.
   	Top 10 Error Domain Names	Lists the top 10 domain names by error count.
   	Top 10 Error URIs	Lists the top 10 URIs by error count.
   	Top 10 Error IPs	Lists the top 10 IP addresses by error count.
   Performance Metrics	Cache Hit Ratio	A trend graph showing the change in cache hit ratio over time.
   	Response Latency (5 minutes)	A trend graph showing response latency over time.
   Customer Portraits	UV Distribution	Displayed on a map of China or the world. Hover over a specific area to view the area name and the number of access requests during that time period.
   	Referer Source Distribution	Lists the Referer source distribution, including the refer_domain and total fields.
   	UA Distribution	Lists the user agent (UA) distribution, including the user_agent and total fields.

Practical examples

• Scenario 1: Analyze the performance of a specific advertisement (a specific URI).

  • Filtering: Select a specific domain name and URI.

  • Analysis:

    • View PV Distribution to check the ad's access performance across regions and the geographical distribution of PVs and UVs.

    • View PV Trend (5 minutes) to see the access trend for the ad.

    • View Referer Source Distribution. The top Referer entries reveal the channels through which users access the ad.

• Scenario 2: Use data analytics to optimize your business API design.

  • Filtering: Select a time range.

  • Analysis: View Top 10 URIs to analyze call volumes and response performance for each API. Use the insights to optimize your website's API design — for example, by optimizing, removing, or merging APIs.

• Scenario 3: Detect potential threats.

  • View Top 10 URIs and Top 10 IPs to quickly identify potential attacks. For example, a typical user might generate 0 to 20 requests per second. If a user generates more than 100 requests per second, they may be an attacker. After confirming the threat, you can add the IP address to a blacklist to block access.

  • View Referer Source Distribution to detect potential hotlinking. If a significant number of requests originate from unknown domains, check whether those domains are using your resources without permission.