Skip to main content
Network logs record each TCP and UDP session that traverses the tunnel between Pangolin clients and resources on your sites. They apply to private resources reached through the Pangolin client (and related tunnel traffic), not to public resources served only through the reverse proxy. You can see which clients and users opened sessions to which private resources, the source and destination addresses and protocols (TCP and UDP), the start and end times of the sessions, and more.
Network logs are only available in Pangolin Cloud or self-hosted Enterprise Edition.

​
What are Network Logs?

Network logs capture tunnel sessions from clients to private resources. They are useful for:
  • Observing which clients and users opened sessions to which private resources
  • Reviewing source and destination addresses and protocols (TCP and UDP)
  • Measuring traffic volume with transmitted and received byte counts
  • Auditing session start and end times for troubleshooting and compliance
Network logs are synchronized to the cloud every 30–60 seconds. A brief delay before entries appear in the table is expected.
Make sure to enable network logging in the org settings

​
Network Log Fields

Each network log entry contains the following fields:

​
Log Retention

Network log retention is controlled by the organization setting. By default, network logs are retained for 0 days (disabled).
Network logs can generate significant data volume depending on session churn and traffic. Consider your storage capacity when configuring retention periods.

​
Exporting

Logs can be exported into CSV format for external analysis and archival. Logs can be exported from the table view in the Pangolin dashboard or via the Pangolin API. When exporting, you can specify date ranges and filters to narrow down the logs you need.