Passive Application Performance Monitoring Logs
For supported software information, click here.
Passive application performance monitoring (APM) logs send information about TCP application monitors, which are referred to as passive APM on Analytics dashboards.
Passive APM Log Message Format
2021-05-12T21:04:54+0000 tcpAppMonLog, applianceName=SDWAN-Branch4, tenantName=Tenant1, mstatsTimeBlock=1620853500, tenantId=1, applianceId=0, vsnId=0, tcpSessCnt=6, tcpSessDur=0, tcpPktsFwd=6, tcpPktsRev=0, tcpReXmitFwd=0, tcpReXmitRev=0, tcpSSA=46574, tcpSAA=1505, tcpTWHS=48079, tcpSynReXmit=0, tcpSynAckReXmit=0, tcpConnRefused=0, tcpConnAborted=0, appId=linkedin, networkPrefix=172.16.0.0/16, user=172.16.41.101, siteName=SDWAN-Branch4, accCktName=WAN1, siteId=108, accCktId=1
Passive APM Log Message Fields
Field |
Description |
---|---|
applianceName |
Name of the Versa Operating SystemTM (VOSTM) device. This is the name displayed in the output of the show system identification branch CLI command on the VOS device. |
tenantName |
Name of the organization (tenant). |
mstatsTimeBlock |
Time since the log was generated, in UNIX epoch time format. |
tenantId |
Tenant identifier. This value is allocated internally by the VOS device. |
vsnId |
Identifier of the virtual service node, or virtual machine (VM). |
tcpSessCnt |
Number of TCP sessions for the application that terminated in the last measurement interval. |
tcpSessDur |
This field is not used. |
tcpPktsFwd |
Number of TCP packets sent in the forward direction for all sessions that terminated in the last measurement interval. |
tcpPktsRev |
Number of TCP packets sent in the reverse direction for all sessions that terminated in the last measurement interval. |
tcpReXmitFwd |
Number of TCP packet retransmitted in the forward direction for all sessions that terminated in the last measurement interval. |
tcpReXmitRev |
Number of TCP packet retransmitted in the reverse direction for all sessions that terminated in the last measurement interval. |
tcpSSA |
Round-trip time for the TCP SYN to SYN-ACK packets, in microseconds. |
tcpSAA |
Round-trip time in microseconds for the TCP SYN-ACK to ACK packets, in microseconds. |
tcpTWHS |
Time for the TCP three-way handshake. |
tcpSynReXmit |
Number of TCP SYN retransmits. |
tcpSynAckReXmit |
Number of TCP SYN-ACK retransmits. |
tcpConnRefused |
Number of TCP connections refused. |
tcpConnAborted |
Number of TCP connections aborted. |
appId |
Application carried by the TCP session. |
networkPrefix |
Destination IP prefix for the TCP sessions. The default is /24, which you can change when configuring the VOS device. |
User |
Source of the TCP session. If the username is available from Active Directory or LDAP, this name is shown. If no username is available, this field shows the source IP address. |
siteName |
Local site name. This is the site name displayed in the output of the show orgs org tenant-name sd-wan site site-name CLI command on the device. |
accCktName |
Local WAN link name. This is the circuit name& ;displayed in the output of the show system sd-wan site wan-interfaces CLI command on the VOS device. |
siteId |
SD-WAN identifier for the site of the VOS device. To display the site identifier, issue the following command from the CLI on the VOS device. admin@Branch1-cli(config)% show system sd-wan site {site-id 101;} |
accCktId |
WAN link identifier. |
Supported Software Information
Release 21.1.1 and later support all content in this article.