Access Logs
Query and filter request logs from your proxy.
Every request proxied through CIFP produces an access log entry. Logs are stored in the control plane database and queryable via the API or the dashboard.
Log Fields
| Field | Description |
|---|---|
| timestamp | When the request was received (ISO-8601) |
| method | HTTP method: GET, POST, etc. |
| url | Full request URL (query params redacted for sensitive paths) |
| srcIp | Source IP of the connecting client |
| statusCode | HTTP status returned by the upstream |
| bytesTransferred | Response body bytes forwarded to the client |
| duration | Round-trip time in milliseconds |
| action | allow, deny, or hitl |
| ruleMatched | Name of the firewall rule that matched (if any) |
| metadata.userAgent | User-Agent header (if present) |
| metadata.secretsUsed | List of secret names injected (placeholder names, not values) |
Querying Logs
bash
# Most recent 100 logs
curl "https://cifp.vril.dev/api/proxies/proxy-id/logs" \
-H "Authorization: Bearer cifp_your_api_key"
# Last 50 denied requests
curl "https://cifp.vril.dev/api/proxies/proxy-id/logs?action=deny&limit=50" \
-H "Authorization: Bearer cifp_your_api_key"
# Filter by URL substring
curl "https://cifp.vril.dev/api/proxies/proxy-id/logs?q=openai.com" \
-H "Authorization: Bearer cifp_your_api_key"
# Filter by time range (ISO-8601)
curl "https://cifp.vril.dev/api/proxies/proxy-id/logs?from=2026-06-01T00:00:00Z&to=2026-06-07T00:00:00Z" \
-H "Authorization: Bearer cifp_your_api_key"
# Filter by status code
curl "https://cifp.vril.dev/api/proxies/proxy-id/logs?status=403" \
-H "Authorization: Bearer cifp_your_api_key"Query Parameters
| Parameter | Description | Default |
|---|---|---|
| limit | Number of logs to return (max 500) | 100 |
| action | Filter by action: allow, deny, hitl | — |
| status | Filter by HTTP status code | — |
| q | Substring match on URL | — |
| from | Start of time range (ISO-8601) | — |
| to | End of time range (ISO-8601) | now |
Retention
Access logs are retained for 90 days by default. Older logs are purged automatically. For longer retention, export logs to your own storage using the API.
Real-Time Events
Subscribe to per-proxy SSE events for real-time log streaming:
bash
curl -N "https://cifp.vril.dev/api/proxies/proxy-id/events" \
-H "Authorization: Bearer cifp_your_api_key"
# Server-sent events:
# event: connected
# event: heartbeat
# event: proxy.update