> For the complete documentation index, see [llms.txt](https://clients.medianova.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://clients.medianova.com/products/edgesight/instant-logs/instances-sources.md).

# Instances & Sources

Learn how to activate Instant Logs, select a storage region, and connect   Medianova, Cloudflare, or Akamai log sources.

Each CDN source connected to **Instant Logs** runs as a separate instance. An organization can run multiple instances, and a single query can include one, several, or all connected sources.

## Choosing a Plan and a Region

Before activating Instant Logs, choose a plan and a storage region. These settings determine the available capacity and where your logs are stored.

### Plans and the Free Trial

Instant Logs plans differ in:

* Included log storage.
* Log retention period.
* Number of CDN sources you can connect.
* API access availability.

The core Instant Logs capabilities are available across self-service plans, including the explorer, filtering, field statistics, and export.

Self-service plans include a free trial. During the trial, you connect a CDN source, ingest your own logs, and use the available Instant Logs capabilities. A status indicator in the product shows the current trial status. At the end of the trial, you can subscribe to a plan or stop using the service.

{% hint style="info" %}
Enterprise plans are arranged separately and do not include a dedicated Enterprise trial. You can use a self-service trial to evaluate Instant Logs with your own traffic before moving to an Enterprise plan.
{% endhint %}

#### Storage Region

Select a storage region when choosing your plan. The selected region determines where your Instant Logs data is stored and controls data residency for the organization.

The storage region applies at the organization level rather than to individual sources. After the region is selected, all sources added to the organization store their logs in the same region.

{% hint style="info" %}
Storing one organization's Instant Logs data in multiple regions requires an Enterprise arrangement. [Contact Medianova Support](/support-and-troubleshooting/contacting-customer-support.md) if your organization requires multi-region storage.
{% endhint %}

## Activating Instant Logs

Instant Logs is available in the [**Medianova Control Panel**](https://cloud.medianova.com) under **Edgesight → Instant Logs**.

When you open Instant Logs for the first time, the product introduction provides a log preview and an option to choose a plan. After you confirm a plan or start a trial, the activation wizard opens.

The activation wizard contains four stages:

{% stepper %}
{% step %}

### Source

Select the CDN provider for the instance:

* **Medianova**
* **Cloudflare**
* **Akamai**

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2FJhtj8giAlkaiwbd0Txdz%2Fimage.png?alt=media&amp;token=a3f8b1d7-359c-4116-9bad-a2a716452fd6" alt=""><figcaption><p>Step 1 of the wizard - choosing which provider this instance will read.</p></figcaption></figure>

Each instance connects to one CDN source. To connect another source, run the activation wizard again. Connected instances can then be queried together in the explorer.
{% endstep %}

{% step %}

### Configure

The required configuration depends on the selected CDN provider. After configuration, supported sources use the same Instant Logs explorer.

**Medianova**

Select the Medianova organization whose logs you want to ingest, then enter a name for the instance.

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2FGFSIjOJZODFzlMhC05XD%2Fimage.png?alt=media&amp;token=15014bce-83ac-4fb4-8135-bfc6d7dfea2c" alt=""><figcaption><p>The Medianova path: choose an organization, then name the instance.</p></figcaption></figure>

The instance name defaults to the organization name and is used only to identify the instance. No configuration outside the [Medianova Control Panel](https://cloud.medianova.com) is required.

**Cloudflare**

Enter a name for the ingest endpoint.

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2FEahMgeGLYYsToEWFCBGv%2Fimage.png?alt=media&amp;token=eeeda717-b853-4996-8fcc-07dd36984831" alt="" width="563"><figcaption><p>Naming the Cloudflare ingest endpoint, with the ingest URL previewed below it.</p></figcaption></figure>

Instant Logs provisions:

* An isolated ingest endpoint.
* A dedicated stream.
* An API token.

Instant Logs then displays the ingest URL. Use this URL when configuring the Cloudflare Logpush job.

**Akamai**

Enter a name for the ingest endpoint.

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2FJbxO2txlyvK3UQEKMWsw%2Fimage.png?alt=media&amp;token=1b73695f-8819-4b69-947c-03cb0c2d2522" alt="" width="563"><figcaption><p>The same form for Akamai - only the provider you point it at differs.</p></figcaption></figure>

Instant Logs provisions the ingest endpoint and provides the ingest URL and API token. The Instant Logs configuration is the same as for Cloudflare; on the provider side, Akamai uses **DataStream** for log delivery.

{% hint style="info" %}
For Cloudflare and Akamai, the ingest URL and API token are displayed only during setup. Save both before leaving this stage. If the token is lost, you must create the endpoint again.
{% endhint %}
{% endstep %}

{% step %}

### Deploy

Instant Logs provisions the log pipeline. Deployment usually takes approximately one minute.

The provisioning process includes the following stages:

* **Creating instance** -- Reserves the workspace.
* **Building pipeline** -- Prepares log storage.
* **Connecting log stream** -- Connects CDN logs to the pipeline.
* **Finalizing access** -- Issues and secures access credentials.

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2F2PSENLw9suwBfyyMVCfl%2Fimage.png?alt=media&amp;token=ee2b582e-caac-4189-b7f5-cdb19c752516" alt="" width="557"><figcaption><p>The provisioning timeline mid-flight - completed steps ticked, the current one still running.</p></figcaption></figure>

The deployment status updates as each stage completes.

{% hint style="info" %}
If a provisioning stage fails, the deployment status identifies the failed stage and provides **Retry** and **Change plan** options. You do not need to restart the activation wizard.
{% endhint %}
{% endstep %}

{% step %}

### First Logs

For Medianova sources, logs begin flowing after the pipeline becomes active.

For Cloudflare and Akamai sources, configure the provider's log delivery service to send logs to the ingest URL provided by Instant Logs. See Connecting a Source That Is Not Medianova.

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2Ff0NWMGcu7ytkGRipGamF%2Fimage.png?alt=media&amp;token=27a3e346-3e11-47ed-8f56-c9615c2ce262" alt="" width="563"><figcaption><p>Setting up the pipeline. The ingest URL and token are shown here for the last time - save them now.</p></figcaption></figure>

The wizard first completes the pipeline configuration and then starts listening for events. After the endpoint becomes active, incoming events are received whether or not you remain on the activation screen.

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2FJQIQEjtxQEQYhf208iIG%2Fimage.png?alt=media&amp;token=e4baa9df-cd46-468f-84f4-fb272763a4f8" alt="" width="563"><figcaption><p>Listening for your first event. The endpoint is live; the wizard advances on its own when records arrive.</p></figcaption></figure>

{% hint style="warning" %}
The ingest URL and API token for Cloudflare and Akamai are displayed for the last time during this stage. Save them before leaving the activation flow.
{% endhint %}

<figure><img src="https://542970813-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtK7oIwmhUHdEJcaH4Hx8%2Fuploads%2FiYHVPZOHh8Vci4KnMCSN%2Fimage.png?alt=media&amp;token=63fc8f07-e40e-42fd-a49c-15eb451e1678" alt="" width="563"><figcaption><p>First logs received: the pipeline is live and the explorer is ready.</p></figcaption></figure>

When the first records arrive, the wizard automatically confirms receipt and displays the number of records received. You can then open the Instant Logs explorer.
{% endstep %}
{% endstepper %}

## Reading Your First Logs

The Instant Logs explorer opens with the **Last 15 minutes** time range and no filters applied.

The explorer contains three main areas:

* The **Log Volume** chart.
* The log table.
* The **Available Fields** panel.

If these areas contain no data, increase the selected time range before troubleshooting the source connection.

## Supported Sources

Instant Logs supports Medianova, Cloudflare, and Akamai as CDN log sources.

#### Medianova

Medianova CDN traffic uses the reference schema to which the other supported sources are mapped.

* **47 columns**
* **47 populated**
* **Full explorer**

No external log delivery configuration is required.

#### Cloudflare

Cloudflare connects to Instant Logs through a **Logpush** job.

Cloudflare provides the `content_type` field, which is not available in the Medianova schema. Medianova-specific topology fields remain empty.

* **48 columns**
* **32 populated**
* **Full explorer**

#### Akamai

Akamai connects to Instant Logs through **DataStream**. Its log format populates fewer fields in the common schema, including fewer origin-side timing fields.

* **47 columns**
* **21 populated**
* **Full explorer**

Use the source selector in the explorer to select one, several, or all connected sources. The selected sources apply to:

* The Log Volume chart.
* The log table.
* Field statistics.
* Export.

When multiple sources are selected, the log table includes an additional column identifying the source of each request.

{% hint style="info" %}
The number of sources you can connect and the CDN providers available to you depend on your plan. A single query can include up to **10 sources**.
{% endhint %}

## Connecting a Source That Is Not Medianova

Cloudflare and Akamai use their existing log delivery services to send logs to Instant Logs. No agent or custom integration is required.

Instant Logs provides an ingest URL and API token during activation. Configure the provider's log delivery service to send logs to that endpoint.

### **Cloudflare Logpush**

{% stepper %}
{% step %}

#### Open Cloudflare Logpush

In the Cloudflare Dashboard, go to **Analytics & Logs → Logs → Logpush jobs**.
{% endstep %}

{% step %}

#### Create a Logpush Job

Create a new job and select **HTTP** as the destination type.
{% endstep %}

{% step %}

#### Enter the Destination URL

Paste the Instant Logs ingest URL into the destination URL field.
{% endstep %}

{% step %}

#### Add the API Token

Configure the following custom header:

```
apikey: <your token>
```

The header authenticates log delivery requests sent from Cloudflare to the Instant Logs ingest endpoint.
{% endstep %}

{% step %}

#### Enable the Logpush Job

Save and enable the job.

Cloudflare begins delivering logs to the Instant Logs endpoint after the job becomes active.
{% endstep %}
{% endstepper %}

### **Akamai DataStream**

{% stepper %}
{% step %}

#### Open Akamai DataStream

In the Akamai Control Center, go to **Common Services → DataStream**.
{% endstep %}

{% step %}

#### Create a DataStream

Create a new stream and select **HTTPS** as the delivery method.
{% endstep %}

{% step %}

#### Enter the Endpoint URL

Paste the Instant Logs ingest URL into the endpoint URL field.
{% endstep %}

{% step %}

#### Add the API Token

Configure the following custom header:

```
apikey: <your token>
```

The header authenticates log delivery requests sent from Akamai to the Instant Logs ingest endpoint.
{% endstep %}

{% step %}

#### Activate the Stream

Activate the DataStream stream.

Akamai begins delivering logs to the Instant Logs endpoint after the stream becomes active.
{% endstep %}
{% endstepper %}

In both cases, logs begin arriving within minutes. The Instant Logs activation wizard automatically detects the first event received by the endpoint.

{% hint style="info" %}
Cloudflare Logpush and Akamai DataStream deliver logs to Instant Logs through an HTTP endpoint. Instant Logs does not require an additional agent between the CDN provider and the ingest endpoint.
{% endhint %}

## Differences Between Providers

CDN providers do not record identical sets of log fields. Instant Logs normalizes supported field names and values into a shared schema so that the same filtering and exploration workflow can be applied across supported sources.

For example, provider-specific cache states are normalized to consistent values such as `HIT` and `MISS`.

If a provider does not record a particular field, Instant Logs returns that field without a value rather than removing it from the normalized schema. This keeps records from different sources aligned in the same table.

When multiple sources are selected, field discovery uses the intersection of fields supported by all selected sources. A field that is available only from one provider is therefore removed from the filter and statistics lists when another source that does not support the field is added. The field becomes available again when the applicable source is selected independently.

{% hint style="info" %}
If a field disappears after you add another source, the underlying log data has not been removed. Instant Logs limits the available filter and statistics fields to those supported across all selected sources so that the same query can be applied consistently.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://clients.medianova.com/products/edgesight/instant-logs/instances-sources.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.