Files
Charon/docs/features/logs.md
T
akanealw eec8c28fb3
Go Benchmark / Performance Regression Check (push) Has been cancelled
Cerberus Integration / Cerberus Security Stack Integration (push) Has been cancelled
Upload Coverage to Codecov / Backend Codecov Upload (push) Has been cancelled
Upload Coverage to Codecov / Frontend Codecov Upload (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (go) (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Has been cancelled
CrowdSec Integration / CrowdSec Bouncer Integration (push) Has been cancelled
Docker Build, Publish & Test / build-and-push (push) Has been cancelled
Quality Checks / Auth Route Protection Contract (push) Has been cancelled
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Has been cancelled
Quality Checks / Backend (Go) (push) Has been cancelled
Quality Checks / Frontend (React) (push) Has been cancelled
Rate Limit integration / Rate Limiting Integration (push) Has been cancelled
Security Scan (PR) / Trivy Binary Scan (push) Has been cancelled
Supply Chain Verification (PR) / Verify Supply Chain (push) Has been cancelled
WAF integration / Coraza WAF Integration (push) Has been cancelled
Docker Build, Publish & Test / Security Scan PR Image (push) Has been cancelled
Repo Health Check / Repo health (push) Has been cancelled
History Rewrite Dry-Run / Dry-run preview for history rewrite (push) Has been cancelled
Prune Renovate Branches / prune (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Nightly Build & Package / sync-development-to-nightly (push) Has been cancelled
Nightly Build & Package / Trigger Nightly Validation Workflows (push) Has been cancelled
Nightly Build & Package / build-and-push-nightly (push) Has been cancelled
Nightly Build & Package / test-nightly-image (push) Has been cancelled
Nightly Build & Package / verify-nightly-supply-chain (push) Has been cancelled
Update GeoLite2 Checksum / update-checksum (push) Has been cancelled
Container Registry Prune / prune-ghcr (push) Has been cancelled
Container Registry Prune / prune-dockerhub (push) Has been cancelled
Container Registry Prune / summarize (push) Has been cancelled
Supply Chain Verification / Verify SBOM (push) Has been cancelled
Supply Chain Verification / Verify Release Artifacts (push) Has been cancelled
Supply Chain Verification / Verify Docker Image Supply Chain (push) Has been cancelled
Monitor Caddy Major Release / check-caddy-major (push) Has been cancelled
Weekly Nightly to Main Promotion / Verify Nightly Branch Health (push) Has been cancelled
Weekly Nightly to Main Promotion / Create Promotion PR (push) Has been cancelled
Weekly Nightly to Main Promotion / Trigger Missing Required Checks (push) Has been cancelled
Weekly Nightly to Main Promotion / Notify on Failure (push) Has been cancelled
Weekly Nightly to Main Promotion / Workflow Summary (push) Has been cancelled
Weekly Security Rebuild / Security Rebuild & Scan (push) Has been cancelled
changed perms
2026-04-22 18:19:14 +00:00

2.5 KiB
Executable File

title, description
title description
Real-Time Logs Watch requests flow through your proxy in real-time

Real-Time Logs

Watch requests flow through your proxy in real-time. Filter by domain, status code, or time range to troubleshoot issues quickly. All the visibility you need without diving into container logs.

Overview

Charon provides real-time log streaming via WebSocket, giving you instant visibility into all proxy traffic and security events. The logging system includes two main views:

  • Access Logs: All HTTP requests flowing through Caddy
  • Security Logs: Cerberus Dashboard showing CrowdSec decisions and WAF events

Logs stream directly to your browser with minimal latency, eliminating the need to SSH into containers or parse log files manually.

Why Use This

  • Instant Troubleshooting: See requests as they happen to diagnose issues in real-time
  • Security Monitoring: Watch for blocked threats and suspicious activity
  • No CLI Required: Everything accessible through the web interface
  • Persistent Connection: WebSocket keeps the stream open without polling

Log Viewer Controls

The log viewer provides intuitive controls for managing the log stream:

Control Function
Pause/Resume Temporarily stop the stream to examine specific entries
Clear Remove all displayed logs (doesn't affect server logs)
Auto-scroll Automatically scroll to newest entries (toggle on/off)

Filtering Options

Filter logs to focus on what matters:

  • Level: Filter by severity (info, warning, error)
  • Source: Filter by service (caddy, crowdsec, cerberus)
  • Text Search: Free-text search across all log fields
  • Time Range: View logs from specific time periods

Server-Side Query Parameters

For advanced filtering, use query parameters when connecting:

/api/logs/stream?level=error&source=crowdsec&limit=1000

WebSocket Connection

The log viewer displays connection status in the header:

  • Connected: Green indicator, logs streaming
  • Reconnecting: Yellow indicator, automatic retry in progress
  • Disconnected: Red indicator, manual reconnect available

Troubleshooting Connection Issues

If the WebSocket disconnects frequently:

  1. Check browser console for errors
  2. Verify no proxy is blocking WebSocket upgrades
  3. Ensure the Charon container has sufficient resources
  4. Check for network timeouts on long-idle connections