---
title: 'Log streaming: LogDNA'
summary: null
url: >-
  https://www.fastly.com/documentation/guides/integrations/logging-endpoints/log-management-and-observability/log-streaming-logdna
---

Fastly's [Real-Time Log Streaming](https://www.fastly.com/documentation/guides/integrations/streaming-logs/about-fastlys-realtime-log-streaming-features) feature can be configured to send logs in a format that is readable by  [LogDNA](https://www.logdna.com). LogDNA is a cloud-based log management system that aggregates system and application logs into a single location.

> **NOTE:** 
>
> Fastly does not provide direct support for third-party services. Read [Fastly's Terms of Service](https://www.fastly.com/terms) for more information.
>
>

## Prerequisites

Before adding LogDNA as a logging endpoint for Fastly services, you'll need to perform the following steps:

- [Sign up](https://www.logdna.com/sign-up) for a LogDNA account if you don't already have one. You can sign up for a free (but restricted plan) or [upgrade a LogDNA plan](https://www.logdna.com/pricing) to include more features.
- [Set up a new LogDNA syslog source](https://docs.logdna.com/docs/syslog) via the LogDNA web application by following their account-tailored log source instructions. Be sure to make note of the port number displayed at the end of the syslog URL when you complete set up. This is the port number you'll enter when setting up LogDNA as a logging endpoint for Fastly.

## Adding LogDNA as a logging endpoint

### Cdn Services

1.   Review the information in our guide to [setting up remote log streaming](/guides/integrations/streaming-logs/setting-up-remote-log-streaming).

2. In the LogDNA (via Syslog) area, click **Create endpoint**.
3. Fill out the **Create a Syslog endpoint** fields as follows:
   -   In the **Name** field, enter a human-readable name for the endpoint.

   -   In the **Placement** area, select where the logging call should be placed in the generated VCL. Valid values are **Format Version Default** and **None**. Read our guide on [changing log placement](/guides/integrations/streaming-logs/changing-log-placement) for more information.

   -   In the **Log format** field, optionally enter an Apache-style string or VCL variables to use for log formatting. Consult the [example format section](#example-format) for details.

   - In the **Syslog address** field, enter `syslog-a.logdna.com`. In the port field after the colon, enter the LogDNA port number you noted during your LogDNA account setup.
   - From the **TLS** menu, select **Yes** to enable encryption for the syslog endpoint. The TLS Hostname and TLS CA Certificate fields will both appear.
   - In the **TLS Hostname** field, enter `syslog-a.logdna.com`. This is the hostname Fastly will use to verify the syslog server's certificate.
4. Click the **Advanced options** link of the **Create a Syslog endpoint** page and decide which of the optional fields to change, if any.
5. Fill out the **Advanced options** of the **Create a Syslog endpoint** page as follows:
   -   In the **Select a log line format** area, select the log line format for your log messages. Our guide on [changing log line formats](/guides/integrations/streaming-logs/changing-log-line-formats) provides more information.

6.   *(Optional)* From the **Processing region** menu, select a geographic region where logs are processed before being sent to the logging endpoint. Our guide on [regional log aggregation](/guides/integrations/streaming-logs/setting-up-regional-log-aggregation) provides more information.

7.   Click **Create** to create the new logging endpoint.

8.   From the **Activate** menu, select **Activate on Production** to deploy your configuration changes.

Logs should begin appearing in your LogDNA account a few seconds after you've created the endpoint and deployed your service.

### Example format

The following is an example format string for sending data to LogDNA. Our discussion of [format strings](https://www.fastly.com/documentation/guides/integrations/streaming-logs/custom-log-formats) provides more information.

```plaintext
{
  "timestamp": "%{strftime(\{"%Y-%m-%dT%H:%M:%S%z"\}, time.start)}V",
  "client_ip": "%{req.http.Fastly-Client-IP}V",
  "geo_country": "%{client.geo.country_name}V",
  "geo_city": "%{client.geo.city}V",
  "host": "%{if(req.http.Fastly-Orig-Host, req.http.Fastly-Orig-Host, req.http.Host)}V",
  "url": "%{json.escape(req.url)}V",
  "request_method": "%{json.escape(req.method)}V",
  "request_protocol": "%{json.escape(req.proto)}V",
  "request_referer": "%{json.escape(req.http.referer)}V",
  "request_user_agent": "%{json.escape(req.http.User-Agent)}V",
  "response_state": "%{json.escape(fastly_info.state)}V",
  "response_status": %{resp.status}V,
  "response_reason": %{if(resp.response, "%22"+json.escape(resp.response)+"%22", "null")}V,
  "response_body_size": %{resp.body_bytes_written}V,
  "fastly_server": "%{json.escape(server.identity)}V",
  "fastly_is_edge": %{if(fastly.ff.visits_this_service == 0, "true", "false")}V
}
```

### Compute Services

1.   Review the information in our guide to [setting up remote log streaming for Compute](/guides/integrations/streaming-logs/setting-up-remote-log-streaming-for-compute). Additionally, our developer documentation provides more [information about logging](/guides/integrations/non-fastly-services/developer-guide-logging/) with Compute code written in our [supported languages](/reference/compute/sdks/).

2. In the LogDNA (via Syslog) area, click **Create endpoint**.
3. Fill out the **Create a Syslog endpoint** fields as follows:
   -   In the **Name** field, enter the endpoint name you specified in your Compute code. For example, in our [Rust code example](/guides/compute/developer-guides/rust/#logging), the name is `my_endpoint_name`.

   - In the **Syslog address** field, enter `syslog-a.logdna.com`. In the port field after the colon, enter the LogDNA port number you noted during your LogDNA account setup.
   - From the **TLS** menu, select **Yes** to enable encryption for the Syslog endpoint. The TLS Hostname and TLS CA Certificate fields will both appear.
   - In the **TLS Hostname** field, enter `syslog-a.logdna.com`. This is the hostname Fastly will use to verify the Syslog server's certificate.
4. _(Optional)_ To change the log line format, click **Advanced options**. 

   In the **Select a log line format** area, select the log line format for your log messages. Our guide on [changing log line formats](/guides/integrations/streaming-logs/changing-log-line-formats) provides more information.

    This must be compatible with your LogDNA configuration.
5.   Click **Create** to create the new logging endpoint.

6.   From the **Activate** menu, select **Activate on Production** to deploy your configuration changes.

Logs should begin appearing in your LogDNA account a few seconds after you've created the endpoint and deployed your service.

### Recommended log format

Log messages can take on any format you choose because the log line format selected above will affect the overall line sent to and parsed by LogDNA.

## Related content

- [API reference: Syslog log streaming](https://www.fastly.com/documentation/reference/api/logging/syslog/)
- [CLI reference: Syslog log streaming](https://www.fastly.com/documentation/reference/cli/logging/syslog/)
