akanealw
eec8c28fb3
Some checks failed
Go Benchmark / Performance Regression Check (push) Has been cancelled
Cerberus Integration / Cerberus Security Stack Integration (push) Has been cancelled
Upload Coverage to Codecov / Backend Codecov Upload (push) Has been cancelled
Upload Coverage to Codecov / Frontend Codecov Upload (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (go) (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Has been cancelled
CrowdSec Integration / CrowdSec Bouncer Integration (push) Has been cancelled
Docker Build, Publish & Test / build-and-push (push) Has been cancelled
Quality Checks / Auth Route Protection Contract (push) Has been cancelled
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Has been cancelled
Quality Checks / Backend (Go) (push) Has been cancelled
Quality Checks / Frontend (React) (push) Has been cancelled
Rate Limit integration / Rate Limiting Integration (push) Has been cancelled
Security Scan (PR) / Trivy Binary Scan (push) Has been cancelled
Supply Chain Verification (PR) / Verify Supply Chain (push) Has been cancelled
WAF integration / Coraza WAF Integration (push) Has been cancelled
Docker Build, Publish & Test / Security Scan PR Image (push) Has been cancelled
Repo Health Check / Repo health (push) Has been cancelled
History Rewrite Dry-Run / Dry-run preview for history rewrite (push) Has been cancelled
Prune Renovate Branches / prune (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Nightly Build & Package / sync-development-to-nightly (push) Has been cancelled
Nightly Build & Package / Trigger Nightly Validation Workflows (push) Has been cancelled
Nightly Build & Package / build-and-push-nightly (push) Has been cancelled
Nightly Build & Package / test-nightly-image (push) Has been cancelled
Nightly Build & Package / verify-nightly-supply-chain (push) Has been cancelled
75 lines
2.5 KiB
Markdown
Executable File
75 lines
2.5 KiB
Markdown
Executable File
---
|
|
title: Real-Time Logs
|
|
description: Watch requests flow through your proxy in real-time
|
|
---
|
|
|
|
# Real-Time Logs
|
|
|
|
Watch requests flow through your proxy in real-time. Filter by domain, status code, or time range to troubleshoot issues quickly. All the visibility you need without diving into container logs.
|
|
|
|
## Overview
|
|
|
|
Charon provides real-time log streaming via WebSocket, giving you instant visibility into all proxy traffic and security events. The logging system includes two main views:
|
|
|
|
- **Access Logs**: All HTTP requests flowing through Caddy
|
|
- **Security Logs**: Cerberus Dashboard showing CrowdSec decisions and WAF events
|
|
|
|
Logs stream directly to your browser with minimal latency, eliminating the need to SSH into containers or parse log files manually.
|
|
|
|
## Why Use This
|
|
|
|
- **Instant Troubleshooting**: See requests as they happen to diagnose issues in real-time
|
|
- **Security Monitoring**: Watch for blocked threats and suspicious activity
|
|
- **No CLI Required**: Everything accessible through the web interface
|
|
- **Persistent Connection**: WebSocket keeps the stream open without polling
|
|
|
|
## Log Viewer Controls
|
|
|
|
The log viewer provides intuitive controls for managing the log stream:
|
|
|
|
| Control | Function |
|
|
|---------|----------|
|
|
| **Pause/Resume** | Temporarily stop the stream to examine specific entries |
|
|
| **Clear** | Remove all displayed logs (doesn't affect server logs) |
|
|
| **Auto-scroll** | Automatically scroll to newest entries (toggle on/off) |
|
|
|
|
## Filtering Options
|
|
|
|
Filter logs to focus on what matters:
|
|
|
|
- **Level**: Filter by severity (info, warning, error)
|
|
- **Source**: Filter by service (caddy, crowdsec, cerberus)
|
|
- **Text Search**: Free-text search across all log fields
|
|
- **Time Range**: View logs from specific time periods
|
|
|
|
### Server-Side Query Parameters
|
|
|
|
For advanced filtering, use query parameters when connecting:
|
|
|
|
```text
|
|
/api/logs/stream?level=error&source=crowdsec&limit=1000
|
|
```
|
|
|
|
## WebSocket Connection
|
|
|
|
The log viewer displays connection status in the header:
|
|
|
|
- **Connected**: Green indicator, logs streaming
|
|
- **Reconnecting**: Yellow indicator, automatic retry in progress
|
|
- **Disconnected**: Red indicator, manual reconnect available
|
|
|
|
### Troubleshooting Connection Issues
|
|
|
|
If the WebSocket disconnects frequently:
|
|
|
|
1. Check browser console for errors
|
|
2. Verify no proxy is blocking WebSocket upgrades
|
|
3. Ensure the Charon container has sufficient resources
|
|
4. Check for network timeouts on long-idle connections
|
|
|
|
## Related
|
|
|
|
- [WebSocket Support](websocket.md)
|
|
- [CrowdSec Integration](crowdsec.md)
|
|
- [Back to Features](../features.md)
|