Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.pangolin.net/llms.txt

Use this file to discover all available pages before exploring further.

Try free on Pangolin Cloud

Fastest way to get started with Pangolin using the hosted control plane. No credit card required.
Network logs record each TCP and UDP session that traverses the tunnel between Pangolin clients and resources on your sites. They apply to private resources reached through the Pangolin client (and related tunnel traffic), not to public resources served only through the reverse proxy. You can see which clients and users opened sessions to which private resources, the source and destination addresses and protocols (TCP and UDP), the start and end times of the sessions, and more.
Network logs are only available in Pangolin Cloud or self-hosted Enterprise Edition.

What are Network Logs?

Network logs capture tunnel sessions from clients to private resources. They are useful for:
  • Observing which clients and users opened sessions to which private resources
  • Reviewing source and destination addresses and protocols (TCP and UDP)
  • Measuring traffic volume with transmitted and received byte counts
  • Auditing session start and end times for troubleshooting and compliance
Network logs are synchronized to the cloud every 30–60 seconds. A brief delay before entries appear in the table is expected.
Make sure to enable network logging in the org settings

Network Log Fields

Each network log entry contains the following fields:
FieldTypeDescription
timestampnumberUnix timestamp (in seconds) when the session started
protocolstringTransport protocol for the session (tcp or udp)
siteResourceIdnumber | nullThe ID of the private resource for the session (if applicable)
clientIdnumber | nullThe Pangolin client ID for the session
clientEndpointstring | nullThe client-side endpoint for the session (e.g. 123.123.123.123:12345)
userIdstring | nullThe user ID when the session is tied to an authenticated user
sourceAddrstringSource address for the session (typically the client-side endpoint)
destAddrstringDestination address for the session (typically the resource-side endpoint)
durationnumber | nullHow long the session lasted (in seconds), when the session has ended
bytesTxnumber | nullBytes transmitted in the session
bytesRxnumber | nullBytes received in the session

Log Retention

Network log retention is controlled by the organization setting. By default, network logs are retained for 0 days (disabled).
Network logs can generate significant data volume depending on session churn and traffic. Consider your storage capacity when configuring retention periods.

Exporting

Logs can be exported into CSV format for external analysis and archival. Logs can be exported from the table view in the Pangolin dashboard or via the Pangolin API. When exporting, you can specify date ranges and filters to narrow down the logs you need.