Event logs
Spectrum logs the entire lifecycle of every client that connects through it. These event logs are available through Logpush as a separate category (dataset type spectrum_events); they are not part of HTTP log events.
For each connection, Spectrum logs a connect event and either a disconnect or error event. Details on status codes can be found below.
Configure Logpush
Spectrum log events can be configured through the dashboard or API, depending on your preferred destination.
Status Codes
| Code | Description |
|---|---|
| 0 | Connection was opened successfully. |
| 200 | Normal connection closure. |
| 400 | The TLS client hello sent during the client/edge TLS handshake contained an invalid SNI. |
| 403 | Connection closed because the client IP matched a firewall rule with deny action. |
| 443 | The client TLS handshake failed. |
| 444 | The origin closed the connection by sending a reset (RST) packet. Not all data may have been sent. |
| 445 | A timeout event (ETIMEDOUT) occurred on an established connection to origin. |
| 446 | Origin keepalive expired (EHOSTUNREACH). |
| 447 | Error while reading from or writing to an established origin connection (ECONNREFUSED). |
| 448 | Origin connection closed due to a broken pipe (EPIPE). |
| 490 | Client TLS error on established connection. |
| 495 | Client connection received an error (ECONNREFUSED). |
| 496 | Client host is unreachable (EHOSTUNREACH). |
| 497 | A timeout event (ETIMEDOUT) occurred on an established connection to client. |
| 498 | Established client connection closed due to broken pipe (EPIPE). |
| 499 | The client closed the connection by sending a reset (RST) packet. Not all data may have been sent. |
| 500 | Internal Cloudflare error. |
| 503 | Error related to performing the TLS handshake with keyless SSL. |
| 520 | Unknown origin connection error. |
| 521 | Origin refused to open the connection (ECONNREFUSED). |
| 522 | Opening a connection to origin failed: ETIMEDOUT |
| 523 | Opening a connection to origin failed: ENETUNREACH |
| 524 | Opening a connection to origin failed due to an internal system error. |
| 530 | Internal error while resolving origin to an IP. |
| 531 | Could not resolve origin to an IP. |
| 532 | The origin connection was not opened because the origin IP is blocked. |
| 533 | Internal error while resolving origin to an IP. |
| 540 | The client/edge TLS handshake failed due to an invalid configuration. |
| 999 | Unknown connection error. |