Logs
Any time you send a request to an Evervault resource, a log of the request and response will be created inside of your app. You can use the Logs view in the Evervault Dashboard to view and filter these log events.
EQL
Logs can be queried using the Evervault Query Language (EQL), which allows you to filter logs based on their attributes.
Operators
The following operators are supported in EQL queries, but not every operator is available for every field. See the searchable fields section below for details.
| Operator | Meaning | Example |
|---|---|---|
= | Exact match | request.method="POST" |
!= | Not equal | function.status!="success" |
> | Greater than | response.status>399 |
< | Less than | response.status<500 |
>= | Greater than or equal to | response.status>=400 |
<= | Less than or equal to | response.status<=299 |
: | Contains | url.path:"/checkout" |
Compound queries
You can combine filters with AND when all conditions must match, OR when any condition can match, and parentheses to group conditions.
Searchable fields
| Field | Operators |
|---|---|
log.idThe unique identifier of the log. | =, != |
resource.idThe ID of the Evervault resource. | =, != |
categoryThe event category. | =, != |
request.methodThe request method used in the HTTP request. | =, != |
response.content_typeThe content type of the response. | =, != |
request.headersThe headers sent in the HTTP request. | =, :, != |
request.bodyThe body of the HTTP request. | =, :, != |
response.statusThe status code of the HTTP response. | =, !=, >, <, >=, <= |
response.headersThe headers sent in the HTTP response. | =, :, != |
response.bodyThe body of the HTTP response. | =, :, != |
request.content_typeThe content type of the request. | =, != |
url.fullThe full URL requested. | =, :, != |
url.domainThe domain part of the URL. | =, != |
url.pathThe path part of the URL. | =, :, != |
url.queryThe query string part of the URL. | =, != |
url.portThe port part of the URL. | =, !=, >, <, >=, <= |
function.idThe unique identifier of the function. | =, != |
function.run_idThe unique identifier of the function run. | =, != |
function.nameThe name of the function. | =, != |
function.logThe log output of the function. | =, :, != |
function.statusThe status of the function. | =, != |
function.initialisation.durationThe duration of the function initialisation. | =, !=, >, <, >=, <= |
function.durationThe duration of the function. | =, !=, >, <, >=, <= |
crypto.fields.encryptCountThe number of fields encrypted. | =, !=, >, <, >=, <= |
crypto.fields.decryptCountThe number of fields decrypted. | =, !=, >, <, >=, <= |
crypto.files.encryptCountThe number of files encrypted. | =, !=, >, <, >=, <= |
crypto.files.decryptCountThe number of files decrypted. | =, !=, >, <, >=, <= |
network_token.idThe unique identifier of the network token. | =, != |
3ds.idThe unique identifier of the 3D Secure session. | =, != |
3ds.statusThe status of a 3D Secure session. | =, != |
3ds.authentication_flowThe authentication flow used in the 3D Secure session. | =, != |
3ds.card.last_fourThe last four digits of a card number. | =, != |
3ds.card.fundingThe card funding type. | =, != |
3ds.card.issuerThe issuer of the card. | =, != |
3ds.card.countryThe country the card is issued in. | =, != |
3ds.card.currencyThe currency of the card. | =, != |
3ds.card.segmentThe card segment. | =, != |
3ds.payment_typeThe type of payment. | =, != |
3ds.card.brandThe brand of the card. | =, != |
3ds.initiatorThe initiator of the 3D Secure session. | =, != |
3ds.versionThe version of the 3D Secure protocol used. | =, != |