Watchpoint stream format
A Watchpoint stream consists of a stream of records (page or objects), and each record contains multiple data fields. The stream is formatted in CSV format.
At the beginning of the stream, a header indicates the version of the stream format and the selected field headers.
Watchpoint stream example
#version 1.1
#x-record-type,x-wp,c-ip,s-ip,cs-method,x-errors
"PAGE","2","64.35.192.225","10.0.24.51","GET","2"
"PAGE","2,25","210.32.156.200","10.0.20.23","GET",""
"PAGE","2","200.12.180.6","10.0.24.53","GET","2,7,3001"
"PAGE","2","10.0.34.52","10.0.10.38","POST",""
.
.
.
#ping
.
.
.
"PAGE","2","64.108.146.33","10.0.20.22","GET",""
"PAGE","2","10.0.34.52","10.0.24.31","POST",""
#rate threshold exceeded (dropped 3 records)
"PAGE","2,25","143.235.81.50","10.0.24.53","GET",""
#stream terminated: requested via UI
#x-record-type,x-wp,c-ip,s-ip,cs-method,x-errors
"PAGE","2","64.35.192.225","10.0.24.51","GET","2"
"PAGE","2,25","210.32.156.200","10.0.20.23","GET",""
"PAGE","2","200.12.180.6","10.0.24.53","GET","2,7,3001"
"PAGE","2","10.0.34.52","10.0.10.38","POST",""
.
.
.
#ping
.
.
.
"PAGE","2","64.108.146.33","10.0.20.22","GET",""
"PAGE","2","10.0.34.52","10.0.24.31","POST",""
#rate threshold exceeded (dropped 3 records)
"PAGE","2,25","143.235.81.50","10.0.24.53","GET",""
#stream terminated: requested via UI
Stream records exceeding the global threshold or subscriber threshold are dropped in a lossy fashion. When this occurs, a system message is inserted into the stream as follows:
Watchpoint stream example (with dropped records)
#rate threshold exceeded (dropped n records)
Related topics
Stopping-Watchpoint-streams
Watchpoint-streaming-API-parameters
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*