This page shows you how to configure and use Cloud Logging and Cloud Monitoring with Service Extensions callouts for Secure Web Proxy.
Logging
Secure Web Proxy uses Logging to capture and store several types of logs, including those relating to extensions. For information about Secure Web Proxy logging, see Logs .
In general, Application Load Balancer log entries contain information that is useful for monitoring and debugging your HTTP or HTTPS traffic. Log entries contain the following types of information:
- Information shown in most Google Cloud logs, such as severity, project ID, project number, and timestamp as described in the LogEntry log.
- HttpRequest log fields.
Request logs for HTTP and HTTPS load balancers contain a service_extension_info
object in the load balancer log entry JSON payload with the following
information:
backend_target_name
backend_target_type
chain
extension
failed_open
failOpen
set to true
, the value true
for this metric indicates that
processing continued when the extension timed out or failed. Applies only to regional external Application Load Balancers, regional internal Application Load Balancers, and cross-region internal Application Load Balancers.
grpc_status
per_processing_request_info
ProcessingRequest
stats for ext_proc
extensions
or CheckRequest
stats for ext_authz
extensions that occur over
the gRPC stream.per_processing_request_info[].event_type
ProcessingRequest
. Can be one of these: REQUEST_HEADERS
, REQUEST_BODY
, RESPONSE_HEADERS
, or RESPONSE_BODY
.per_processing_request_info[].latency
ProcessingRequest
message is sent to the extension to when the last byte of the ProcessingResponse
message is received.per_processing_request_info[].processing_effect
Can be one of the following values:
-
NONE: indicates that contents were not changed. -
NONE_FAILED_OPEN: indicates that no mutations were performed because the extension failed open. -
CONTENT_MODIFIED: indicates that content was changed by a successfully applied mutation request. -
IMMEDIATE_RESPONSE: indicates that an immediate response was sent by the extension to halt all further processing. -
MUTATION_REJECTED: indicates that the extension requested at least one disallowed change and further processing was discontinued. Appropriate error messages are logged. -
UNSPECIFIED: indicates that the effect of processing is not known.
per_processing_request_info[].processing_effect_details
processing_effect
is MUTATION_REJECTED
, the details about
why a mutation was rejected. Applies only to regional external Application Load Balancers, regional internal Application Load Balancers, and cross-region internal Application Load Balancers.
resource
Monitoring
For information about Monitoring metrics for Secure Web Proxy, see Available metrics .

