Document toolboxDocument toolbox

cdn.akamai

Introduction

The tags beginning with cdn.akamai identify events generated by Akamai.  The tag cdn.akamai.cloudmonitor identifies all log events generated by Akamai CDN and sent using the Akamai Cloud Monitor API service.

Valid tags and data tables

The full tag must have 3 levels or more. The first two are fixed as cdn.akamai. The third level identifies the type of events sent, and the fourth level indicates the event subtype. 

Technology

Brand

Type

Subtype

Technology

Brand

Type

Subtype

cdn

akamai

  • cloudmonitor



  • audit

  • audit-extended

  • a

  • siem



  • access



Regarding Cloud Monitor API service, this technology uses a single tag to support all of the data elements used in the Cloud Monitor default connectors. The tag is simply cdn.akamai.cloudmonitor and the associated events are saved in Devo in a table of the same name.

For more information, read more about Devo tags.

These are the valid tags and corresponding data tables that will receive the parsers' data:

Tag

Data table

Tag

Data table

cdn.akamai.cloudmonitor

cdn.akamai.cloudmonitor

cdn.akamai.audit.a

cdn.akamai.audit

cdn.akamai.audit-extended.a

cdn.akamai.auditExtended

cdn.akamai.siem

cdn.akamai.siem

cdn.akamai.access

cdn.akamai.access

How is the data sent to Devo?

Cloud Monitor sends event data in JSON format via HTTPS POST requests. For complete instructions, see the vendor documentation online.