Client-Disconnected Log Event JSON Format

Abstract

This document describes the JSON log event fields of the Log Streaming Client-Disconnected log event and provides an example.

The client-disconnected log event is generated when an OpenVPN client (including Connectors) disconnects from CloudConnexa.

The log event JSON contains the Header fields and a log JSON object. The fields in the log JSON object for when the eventName in the Header is set to client-disconnected are described in the table below. For more information on the Header, refer to Log Event Header Fields.

Table 6. JSON fields present in the log object for the client-disconnected log event

Field Name	Type	Description
sessionBytesIn	Integer	The number of bytes transferred to the Client from CloudConnexa.
sessionBytesOut	Integer	The number of bytes transferred from the Client to CloudConnexa.
sessionDisconnectReason	String	The reason the connection was disconnected.
sessionDurationSeconds	Integer	The time in seconds that the Client was connected.
sessionEndTime	DateTime	The timestamp of when the connection was disconnected.
sessionDisconnectReasonDescription	String	Contains additional information about the reason for disconnection. It can be null.
clientUUID	String	The unique hardware UUID of the disconnected device.
clientSessionId	String	A unique identifier assigned to the connection. Can be used to correlate other session events.
clientOsType	String	The client's operating system.
clientOsVersion	String	The version of the client's operating system.
clientPublicIp	String	The client's public IP address.
clientTunnelIpV4	String	The IPv4 address of the client's OpenVPN tunnel.
clientTunnelIpV6	String	The IPv6 address of the client's OpenVPN tunnel.
sessionProtocol	String	The protocol used for the OpenVPN tunnel.
sessionTunnelProtocol	String	The type of tunneling protocol used.
sessionStartTime	DateTime	The timestamp of when the connection started.
gatewayRegionName	String	The name of the CloudConnexa Region that the client disconnected from.
gatewayRegion	String	The identifier of the CloudConnexa Region that the client disconnected from.
gatewayId	String	The identifier of the specific gateway in the Region the client disconnected from.

Example of a Client-Disconnected Log Event

{
  "CloudConnexaLogVersion": 1,
  "timestamp": "2023-12-20T10:45:14.000000Z",
  "cloudId": "test",
  "service": "CloudConnexa",
  "traceId": "693bbbde-626d-4940-ac2b-4e75efb49bf7",
  "clientPublicIp": "178.136.162.32",
  "initiator": "5d34eabe-f88d-4570-9954-818c03b90b4b",
  "initiatorType": "Device",
  "initiatorName": "My Device",
  "parentEntity": "new@gmail.com",
  "parentEntityType": "User",
  "parentEntityName": "My User",
  "category": "Security.Logins",
  "eventName": "client-disconnected",
  "log": {
    "sessionBytesIn": 34409,
    "sessionBytesOut": 30971,
    "clientUUID": "8EE244A8-90C8-5AFF-8F83-9B7E8290E4A5",
    "sessionDisconnectReason": "User Disconnected",
    "clientOsType": "macOS",
    "clientOsVersion": "Ventura (13.3.1)",
    "sessionProtocol": "UDP",
    "clientPublicIp": "178.136.162.32",
    "sessionDurationSeconds": 4,
    "sessionEndTime": "2023-12-20T10:45:14.000000Z",
    "sessionStartTime": "2023-12-20T10:45:10.000000Z",
    "clientTunnelIpV4": "100.96.1.34",
    "clientTunnelIpV6": "fd:0:0:8102::2",
    "clientSessionId": "6582c5be4203d502df029d4a",
    "gatewayRegionName": "San Jose (CA)",
    "gatewayRegion": "us-dev-1",
    "gatewayId": "us-ord-dc1-g1",
    "sessionTunnelProtocol": "OpenVPN",
    "sessionDisconnectReasonDescription": "null"
  }
}

In this section:

Client-Disconnected Log Event JSON Format

Search results