[Документация Yandex Cloud](../../index.md) > [Yandex Application Load Balancer](../index.md) > Справочник аудитных логов > LoadBalancerTCPAccessLog # Application Load Balancer Audit Trails Events: LoadBalancerTCPAccessLog ## Event JSON schema {#yandex.cloud.audit.apploadbalancer.LoadBalancerTCPAccessLog2-schema} ```json { "eventId": "string", "eventSource": "string", "eventType": "string", "eventTime": "string", "authentication": { "authenticated": "boolean", // Includes only one of the fields `subjectType` "subjectType": "string", // end of the list of possible fields // Includes only one of the fields `subjectId` "subjectId": "string", // end of the list of possible fields // Includes only one of the fields `subjectName` "subjectName": "string", // end of the list of possible fields // Includes only one of the fields `federationId` "federationId": "string", // end of the list of possible fields // Includes only one of the fields `federationName` "federationName": "string", // end of the list of possible fields // Includes only one of the fields `federationType` "federationType": "string", // end of the list of possible fields "tokenInfo": { "maskedIamToken": "string", // Includes only one of the fields `iamTokenId` "iamTokenId": "string", // end of the list of possible fields // Includes only one of the fields `impersonatorId` "impersonatorId": "string", // end of the list of possible fields // Includes only one of the fields `impersonatorType` "impersonatorType": "string", // end of the list of possible fields // Includes only one of the fields `impersonatorName` "impersonatorName": "string", // end of the list of possible fields // Includes only one of the fields `impersonatorFederationId` "impersonatorFederationId": "string", // end of the list of possible fields // Includes only one of the fields `impersonatorFederationName` "impersonatorFederationName": "string", // end of the list of possible fields // Includes only one of the fields `impersonatorFederationType` "impersonatorFederationType": "string" // end of the list of possible fields } }, "resourceMetadata": { "path": [ { "resourceType": "string", "resourceId": "string", // Includes only one of the fields `resourceName` "resourceName": "string" // end of the list of possible fields } ] }, "requestMetadata": { "remoteAddress": "string", "userAgent": "string", "requestId": "string", // Includes only one of the fields `remotePort` "remotePort": "string" // end of the list of possible fields }, "eventStatus": "string", "details": { "loadBalancerId": "string", "loadBalancerName": "string", "type": "string", "time": "string", "clientIp": "string", "clientPort": "string", "backendIp": "string", "backendPort": "string", "backendGroupId": "string", "backendName": "string", "requestProcessingTimes": { "requestProcessingTime": "string", "requestRxTime": "string", "requestTxTime": "string", "backendResponseTime": "string", "backendProcessingTime": "string", "responseProcessingTime": "string", "responseRxTime": "string", "responseTxTime": "string", "responseStartTime": "string", "requestTime": "string" }, "errorDetails": "string", "tlsVersion": "string", "cipherSuite": "string", "sniHostname": "string", "serverCertificateSubject": "string", "clientCertificateSubject": "string", "upstreamTransportFailureReason": "string", "bytesSent": "string", "bytesReceived": "string", "responseFlags": { "failedLocalHealthcheck": "boolean", "noHealthyUpstream": "boolean", "upstreamRequestTimeout": "boolean", "localReset": "boolean", "upstreamRemoteReset": "boolean", "upstreamConnectionFailure": "boolean", "upstreamConnectionTermination": "boolean", "upstreamOverflow": "boolean", "noRouteFound": "boolean", "delayInjected": "boolean", "faultInjected": "boolean", "rateLimited": "boolean", "unauthorizedDetails": { "reason": "string" }, "rateLimitServiceError": "boolean", "downstreamConnectionTermination": "boolean", "upstreamRetryLimitExceeded": "boolean", "streamIdleTimeout": "boolean", "invalidEnvoyRequestHeaders": "boolean", "downstreamProtocolError": "boolean", "upstreamMaxStreamDurationReached": "boolean", "responseFromCacheFilter": "boolean", "noFilterConfigFound": "boolean", "durationTimeout": "boolean", "upstreamProtocolError": "boolean", "noClusterFound": "boolean", "overloadManager": "boolean", "dnsResolutionFailure": "boolean", "downstreamRemoteReset": "boolean" }, "upstreamHost": "string", "upstreamTimings": { "firstTxByte": "string", "lastTxByte": "string", "firstRxByte": "string", "lastRxByte": "string" }, "downstreamTimings": { "firstTxByte": "string", "lastTxByte": "string", "firstRxByte": "string", "lastRxByte": "string" }, "duration": "string" } } ``` ## Field description {#yandex.cloud.audit.apploadbalancer.LoadBalancerTCPAccessLog2} #| ||Field | Description || || eventId | **string** || || eventSource | **string** || || eventType | **string** || || eventTime | **string** (date-time) String in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the [Protocol Buffers reference](https://developers.google.com/protocol-buffers/docs/reference/overview). In some languages, built-in datetime utilities do not support nanosecond precision (9 digits). || || authentication | **[IamAuthentication](#yandex.cloud.audit.IamAuthentication)** || || resourceMetadata | **[ResourceMetadata](#yandex.cloud.audit.ResourceMetadata)** || || requestMetadata | **[RequestMetadata](#yandex.cloud.audit.RequestMetadata)** || || eventStatus | **enum** (EventStatus) - `STARTED` - `ERROR` - `DONE` - `CANCELLED` - `RUNNING` || || details | **[EventDetails](#yandex.cloud.audit.apploadbalancer.LoadBalancerTCPAccessLog.EventDetails)** || |# ## IamAuthentication {#yandex.cloud.audit.IamAuthentication} #| ||Field | Description || || authenticated | **boolean** || || subjectType | **enum** (IamSubjectType) Includes only one of the fields `subjectType`. - `YANDEX_PASSPORT_USER_ACCOUNT` - `SERVICE_ACCOUNT` - `FEDERATED_USER_ACCOUNT` - `SSH_USER` - `KUBERNETES_USER` || || subjectId | **string** Includes only one of the fields `subjectId`. || || subjectName | **string** Includes only one of the fields `subjectName`. || || federationId | **string** Includes only one of the fields `federationId`. || || federationName | **string** Includes only one of the fields `federationName`. || || federationType | **enum** (FederationType) Includes only one of the fields `federationType`. - `GLOBAL_FEDERATION` - `PRIVATE_FEDERATION` || || tokenInfo | **[IamTokenInfo](#yandex.cloud.audit.IamAuthentication.IamTokenInfo)** || |# ## IamTokenInfo {#yandex.cloud.audit.IamAuthentication.IamTokenInfo} #| ||Field | Description || || maskedIamToken | **string** || || iamTokenId | **string** Includes only one of the fields `iamTokenId`. || || impersonatorId | **string** Includes only one of the fields `impersonatorId`. || || impersonatorType | **enum** (IamSubjectType) Includes only one of the fields `impersonatorType`. - `YANDEX_PASSPORT_USER_ACCOUNT` - `SERVICE_ACCOUNT` - `FEDERATED_USER_ACCOUNT` - `SSH_USER` - `KUBERNETES_USER` || || impersonatorName | **string** Includes only one of the fields `impersonatorName`. || || impersonatorFederationId | **string** Includes only one of the fields `impersonatorFederationId`. || || impersonatorFederationName | **string** Includes only one of the fields `impersonatorFederationName`. || || impersonatorFederationType | **enum** (FederationType) Includes only one of the fields `impersonatorFederationType`. - `GLOBAL_FEDERATION` - `PRIVATE_FEDERATION` || |# ## ResourceMetadata {#yandex.cloud.audit.ResourceMetadata} #| ||Field | Description || || path[] | **[Resource](#yandex.cloud.audit.Resource)** || |# ## Resource {#yandex.cloud.audit.Resource} #| ||Field | Description || || resourceType | **string** || || resourceId | **string** || || resourceName | **string** Includes only one of the fields `resourceName`. || |# ## RequestMetadata {#yandex.cloud.audit.RequestMetadata} #| ||Field | Description || || remoteAddress | **string** || || userAgent | **string** || || requestId | **string** || || remotePort | **string** (int64) Includes only one of the fields `remotePort`. || |# ## EventDetails {#yandex.cloud.audit.apploadbalancer.LoadBalancerTCPAccessLog.EventDetails} #| ||Field | Description || || loadBalancerId | **string** || || loadBalancerName | **string** || || type | **string** || || time | **string** (date-time) String in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the [Protocol Buffers reference](https://developers.google.com/protocol-buffers/docs/reference/overview). In some languages, built-in datetime utilities do not support nanosecond precision (9 digits). || || clientIp | **string** || || clientPort | **string** (int64) || || backendIp | **string** || || backendPort | **string** (int64) || || backendGroupId | **string** || || backendName | **string** || || requestProcessingTimes | **[RequestProcessingTimes](#yandex.cloud.audit.apploadbalancer.RequestProcessingTimes)** || || errorDetails | **string** || || tlsVersion | **string** || || cipherSuite | **string** || || sniHostname | **string** || || serverCertificateSubject | **string** || || clientCertificateSubject | **string** || || upstreamTransportFailureReason | **string** || || bytesSent | **string** (int64) || || bytesReceived | **string** (int64) || || responseFlags | **[ResponseFlags](#yandex.cloud.audit.apploadbalancer.ResponseFlags)** || || upstreamHost | **string** || || upstreamTimings | **[Timings](#yandex.cloud.audit.apploadbalancer.Timings)** || || downstreamTimings | **[Timings](#yandex.cloud.audit.apploadbalancer.Timings)** || || duration | **string** (duration) || |# ## RequestProcessingTimes {#yandex.cloud.audit.apploadbalancer.RequestProcessingTimes} #| ||Field | Description || || requestProcessingTime | **string** (duration) || || requestRxTime | **string** (duration) || || requestTxTime | **string** (duration) || || backendResponseTime | **string** (duration) || || backendProcessingTime | **string** (duration) || || responseProcessingTime | **string** (duration) || || responseRxTime | **string** (duration) || || responseTxTime | **string** (duration) || || responseStartTime | **string** (duration) || || requestTime | **string** (duration) || |# ## ResponseFlags {#yandex.cloud.audit.apploadbalancer.ResponseFlags} #| ||Field | Description || || failedLocalHealthcheck | **boolean** || || noHealthyUpstream | **boolean** || || upstreamRequestTimeout | **boolean** || || localReset | **boolean** || || upstreamRemoteReset | **boolean** || || upstreamConnectionFailure | **boolean** || || upstreamConnectionTermination | **boolean** || || upstreamOverflow | **boolean** || || noRouteFound | **boolean** || || delayInjected | **boolean** || || faultInjected | **boolean** || || rateLimited | **boolean** || || unauthorizedDetails | **[Unauthorized](#yandex.cloud.audit.apploadbalancer.ResponseFlags.Unauthorized)** || || rateLimitServiceError | **boolean** || || downstreamConnectionTermination | **boolean** || || upstreamRetryLimitExceeded | **boolean** || || streamIdleTimeout | **boolean** || || invalidEnvoyRequestHeaders | **boolean** || || downstreamProtocolError | **boolean** || || upstreamMaxStreamDurationReached | **boolean** || || responseFromCacheFilter | **boolean** || || noFilterConfigFound | **boolean** || || durationTimeout | **boolean** || || upstreamProtocolError | **boolean** || || noClusterFound | **boolean** || || overloadManager | **boolean** || || dnsResolutionFailure | **boolean** || || downstreamRemoteReset | **boolean** || |# ## Unauthorized {#yandex.cloud.audit.apploadbalancer.ResponseFlags.Unauthorized} #| ||Field | Description || || reason | **enum** (Reason) - `EXTERNAL_SERVICE` || |# ## Timings {#yandex.cloud.audit.apploadbalancer.Timings} #| ||Field | Description || || firstTxByte | **string** (duration) || || lastTxByte | **string** (duration) || || firstRxByte | **string** (duration) || || lastRxByte | **string** (duration) || |#