Cloud Platform

Varnish request logs

The Varnish® request log displays in JSON format the requests processed by Varnish, regardless of their caching status. Most subscribers use shared load balancers. Varnish logs are available only to subscriptions with dedicated balancers using the Streaming log entries in real time feature. You cannot download Varnish request logs from either the Cloud Platform interface or your infrastructure.

For a list of the log files handled by Cloud Platform, including accessing these log files, log file retention, and their locations, see About Cloud Platform logging.


  • Acquia’s log forwarding feature adds information to the beginning of each line that is forwarded to an external service. For more information, see File formats in forwarded log files.

  • The forwarded Varnish logs in the JSON format do not contain the query field.

Parsing the log file

The following line is a representative example of the data written into your website’s Varnish request log, with line breaks included for ease of reading:

   "time":"[12/Dec/2018:23:59:59 +0000]",
   "user_agent":"Browser Name Here",

Each of the items in the Varnish request log is noted in the following table, along with its description:




The date and time of the request in HTTP date/time format (%d/%b/%Y:%T %z).


The HTTP status sent to the client. Production environments don’t display full information for HTTP 5xx status codes.


The size of the response in bytes, excluding HTTP headers.


The method of the request (usually GET or POST).


The host name of the request.


The full path of the requested file.


The referrer for this request, if any.


The full user-agent for this request.


The originating IP address of the request.


Time from when the request processing starts until the first byte is sent to the client, in seconds.


Whether the request was a cache HIT or MISS. PIPE and PASS are considered misses.


How the request was handled: cache HIT, MISS, PIPE, PASS or ERROR.


The full set of IP addresses tracked as “requester IP,” which will contain the IP addresses of the following if they are in use by the subscription:

  • Load balancer

  • ELB (Elastic Load Balancer)

  • Content Delivery Networks or Web Application Firewalls (WAFs) such as Edge)


A unique ID attached to this request by the load balancer, which appears in several Cloud Platform log files. For more information, see Using HTTP request IDs.


Log name identifier. Not required, and not always set.


The UUID (Universal Unique Identifier) of the application serving this request.


The name of the Cloud Platform environment serving this request.


This value is for Acquia internal use only.

More information