Log sources and fields
Each event is a row in the ClickHouse logs table. Filter the source column to select a service. The tables below list its fields; a field is not necessarily populated on every event.
id, timestamp, event_message, severity_text, and source are top-level columns. Service fields are string values in log_attributes, even when the original event contains a number or boolean. Use the ClickHouse query field column directly. See Query logs with SQL for casting and field discovery.
Sources
source | Events |
|---|---|
edge_logs | HTTP requests through the API gateway, including REST and GraphQL |
postgres_logs | Database activity, statements, and errors |
postgrest_logs | PostgREST server logs |
auth_logs | Auth server: login, JWT, OAuth, email |
auth_audit_logs | Auth audit events |
storage_logs | Storage API: uploads and object access |
realtime_logs | Realtime server: channels, presence, broadcast |
function_edge_logs | HTTP request and response for an Edge Function invocation |
function_logs | console output from inside an Edge Function |
supavisor_logs | Shared pooler: pooling and timeouts |
pgbouncer_logs | Dedicated pooler |
pg_upgrade_logs | Database version upgrade |
For postgres_logs, statement text and error details can appear in event_message. A missing structured field does not mean the event has no detail.
Captured HTTP headers
API Gateway logs capture only the headers below. Other headers still reach the application and client but are omitted from these logs.
Request headers:
acceptcf-connecting-ipcf-ipcountryhostuser-agentx-forwarded-protoreferercontent-lengthx-real-ipx-client-infox-forwarded-user-agentrangeprefertraceparent
Response headers:
cf-cache-statuscf-raycontent-locationcontent-rangecontent-typecontent-lengthdatetransfer-encodingx-kong-proxy-latencyx-kong-upstream-latencysb-gateway-modesb-gateway-version
Capture limits
log_attributes['request_id'],log_attributes['trace_id'], andlog_attributes['span_id']are potentially present on any source but are not guaranteed to be populated. The API gateway unpacks thesb-request-idrequest header intolog_attributes['request_id']— there is nolog_attributes['request.headers.sb-request-id']key.- Hosted Postgres events longer than 100,000 characters and Edge Function log messages longer than 10,000 characters are truncated.
- Internal Supabase service connection events are not recorded in hosted Postgres logs.
- An Edge Function invocation uses
function_edge_logs; its console output usesfunction_logs. - For API Load Balancer traffic,
log_attributes['load_balancer_redirect_identifier']identifies the upstream database.
Fields by source
Source: edge_logs
event_messagestringidstringidentifierstringidentifierlog_attributes['identifier']load_balancer_redirect_identifierstringmetadata.load_balancer_redirect_identifierlog_attributes['load_balancer_redirect_identifier']request_idstringmetadata.request_idlog_attributes['request_id']request.cf.asnnumbermetadata.request.cf.asnlog_attributes['request.cf.asn']request.cf.asOrganizationstringmetadata.request.cf.asOrganizationlog_attributes['request.cf.asOrganization']request.cf.botManagement.corporateProxybooleanmetadata.request.cf.botManagement.corporateProxylog_attributes['request.cf.botManagement.corporateProxy']request.cf.botManagement.detectionIdsnumber[]metadata.request.cf.botManagement.detectionIdslog_attributes['request.cf.botManagement.detectionIds']request.cf.botManagement.ja3Hashstringmetadata.request.cf.botManagement.ja3Hashlog_attributes['request.cf.botManagement.ja3Hash']request.cf.botManagement.scorenumbermetadata.request.cf.botManagement.scorelog_attributes['request.cf.botManagement.score']request.cf.botManagement.staticResourcebooleanmetadata.request.cf.botManagement.staticResourcelog_attributes['request.cf.botManagement.staticResource']request.cf.botManagement.verifiedBotbooleanmetadata.request.cf.botManagement.verifiedBotlog_attributes['request.cf.botManagement.verifiedBot']request.cf.citystringmetadata.request.cf.citylog_attributes['request.cf.city']request.cf.clientTcpRttnumbermetadata.request.cf.clientTcpRttlog_attributes['request.cf.clientTcpRtt']request.cf.clientTrustScorenumbermetadata.request.cf.clientTrustScorelog_attributes['request.cf.clientTrustScore']request.cf.colostringmetadata.request.cf.cololog_attributes['request.cf.colo']request.cf.continentstringmetadata.request.cf.continentlog_attributes['request.cf.continent']request.cf.countrystringmetadata.request.cf.countrylog_attributes['request.cf.country']request.cf.edgeRequestKeepAliveStatusnumbermetadata.request.cf.edgeRequestKeepAliveStatuslog_attributes['request.cf.edgeRequestKeepAliveStatus']request.cf.httpProtocolstringmetadata.request.cf.httpProtocollog_attributes['request.cf.httpProtocol']request.cf.latitudestringmetadata.request.cf.latitudelog_attributes['request.cf.latitude']request.cf.longitudestringmetadata.request.cf.longitudelog_attributes['request.cf.longitude']request.cf.metroCodestringmetadata.request.cf.metroCodelog_attributes['request.cf.metroCode']request.cf.postalCodestringmetadata.request.cf.postalCodelog_attributes['request.cf.postalCode']request.cf.regionstringmetadata.request.cf.regionlog_attributes['request.cf.region']request.cf.timezonestringmetadata.request.cf.timezonelog_attributes['request.cf.timezone']request.cf.tlsCipherstringmetadata.request.cf.tlsCipherlog_attributes['request.cf.tlsCipher']request.cf.tlsClientAuth.certPresentedstringmetadata.request.cf.tlsClientAuth.certPresentedlog_attributes['request.cf.tlsClientAuth.certPresented']request.cf.tlsClientAuth.certRevokedstringmetadata.request.cf.tlsClientAuth.certRevokedlog_attributes['request.cf.tlsClientAuth.certRevoked']request.cf.tlsClientAuth.certVerifiedstringmetadata.request.cf.tlsClientAuth.certVerifiedlog_attributes['request.cf.tlsClientAuth.certVerified']request.cf.tlsExportedAuthenticator.clientFinishedstringmetadata.request.cf.tlsExportedAuthenticator.clientFinishedlog_attributes['request.cf.tlsExportedAuthenticator.clientFinished']request.cf.tlsExportedAuthenticator.clientHandshakestringmetadata.request.cf.tlsExportedAuthenticator.clientHandshakelog_attributes['request.cf.tlsExportedAuthenticator.clientHandshake']request.cf.tlsExportedAuthenticator.serverFinishedstringmetadata.request.cf.tlsExportedAuthenticator.serverFinishedlog_attributes['request.cf.tlsExportedAuthenticator.serverFinished']request.cf.tlsExportedAuthenticator.serverHandshakestringmetadata.request.cf.tlsExportedAuthenticator.serverHandshakelog_attributes['request.cf.tlsExportedAuthenticator.serverHandshake']request.cf.tlsVersionstringmetadata.request.cf.tlsVersionlog_attributes['request.cf.tlsVersion']request.headers.cf_connecting_ipstringmetadata.request.headers.cf_connecting_iplog_attributes['request.headers.cf_connecting_ip']request.headers.cf_ipcountrystringmetadata.request.headers.cf_ipcountrylog_attributes['request.headers.cf_ipcountry']request.headers.cf_raystringmetadata.request.headers.cf_raylog_attributes['request.headers.cf_ray']request.headers.hoststringmetadata.request.headers.hostlog_attributes['request.headers.host']request.headers.refererstringmetadata.request.headers.refererlog_attributes['request.headers.referer']request.headers.traceparentstringmetadata.request.headers.traceparentlog_attributes['request.headers.traceparent']request.headers.x_client_infostringmetadata.request.headers.x_client_infolog_attributes['request.headers.x_client_info']request.headers.x_forwarded_protostringmetadata.request.headers.x_forwarded_protolog_attributes['request.headers.x_forwarded_proto']request.headers.x_real_ipstringmetadata.request.headers.x_real_iplog_attributes['request.headers.x_real_ip']request.hoststringmetadata.request.hostlog_attributes['request.host']request.methodstringmetadata.request.methodlog_attributes['request.method']request.pathstringmetadata.request.pathlog_attributes['request.path']request.protocolstringmetadata.request.protocollog_attributes['request.protocol']request.searchstringmetadata.request.searchlog_attributes['request.search']request.urlstringmetadata.request.urllog_attributes['request.url']response.headers.cf_cache_statusstringmetadata.response.headers.cf_cache_statuslog_attributes['response.headers.cf_cache_status']response.headers.cf_raystringmetadata.response.headers.cf_raylog_attributes['response.headers.cf_ray']response.headers.content_locationstringmetadata.response.headers.content_locationlog_attributes['response.headers.content_location']response.headers.content_rangestringmetadata.response.headers.content_rangelog_attributes['response.headers.content_range']response.headers.content_typestringmetadata.response.headers.content_typelog_attributes['response.headers.content_type']response.headers.datestringmetadata.response.headers.datelog_attributes['response.headers.date']response.headers.sb_gateway_versionstringmetadata.response.headers.sb_gateway_versionlog_attributes['response.headers.sb_gateway_version']response.headers.transfer_encodingstringmetadata.response.headers.transfer_encodinglog_attributes['response.headers.transfer_encoding']response.headers.x_kong_proxy_latencystringmetadata.response.headers.x_kong_proxy_latencylog_attributes['response.headers.x_kong_proxy_latency']response.origin_timenumbermetadata.response.origin_timelog_attributes['response.origin_time']response.status_codenumbermetadata.response.status_codelog_attributes['response.status_code']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: auth_logs
event_messagestringidstringauth_event.actionstringmetadata.auth_event.actionlog_attributes['auth_event.action']auth_event.actor_idstringmetadata.auth_event.actor_idlog_attributes['auth_event.actor_id']auth_event.actor_usernamestringmetadata.auth_event.actor_usernamelog_attributes['auth_event.actor_username']auth_event.actor_via_ssobooleanmetadata.auth_event.actor_via_ssolog_attributes['auth_event.actor_via_sso']auth_event.log_typestringmetadata.auth_event.log_typelog_attributes['auth_event.log_type']auth_event.traits.providerstringmetadata.auth_event.traits.providerlog_attributes['auth_event.traits.provider']auth_event.traits.user_emailstringmetadata.auth_event.traits.user_emaillog_attributes['auth_event.traits.user_email']auth_event.traits.user_idstringmetadata.auth_event.traits.user_idlog_attributes['auth_event.traits.user_id']auth_event.traits.user_phonestringmetadata.auth_event.traits.user_phonelog_attributes['auth_event.traits.user_phone']componentstringmetadata.componentlog_attributes['component']durationnumbermetadata.durationlog_attributes['duration']hoststringmetadata.hostlog_attributes['host']levelstringmetadata.levellog_attributes['level']methodstringmetadata.methodlog_attributes['method']msgstringmetadata.msglog_attributes['msg']pathstringmetadata.pathlog_attributes['path']refererstringmetadata.refererlog_attributes['referer']remote_addrstringmetadata.remote_addrlog_attributes['remote_addr']request_idstringmetadata.request_idlog_attributes['request_id']request.headers.traceparentstringmetadata.request.headers.traceparentlog_attributes['request.headers.traceparent']span_idstringmetadata.span_idlog_attributes['span_id']statusnumbermetadata.statuslog_attributes['status']timestampstringmetadata.timestamplog_attributes['timestamp']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: auth_audit_logs
event_messagestringidstringidentifierstringidentifierlog_attributes['identifier']auth_audit_event.actionstringmetadata.auth_audit_event.actionlog_attributes['auth_audit_event.action']auth_audit_event.actor_idstringmetadata.auth_audit_event.actor_idlog_attributes['auth_audit_event.actor_id']auth_audit_event.actor_namestringmetadata.auth_audit_event.actor_namelog_attributes['auth_audit_event.actor_name']auth_audit_event.actor_usernamestringmetadata.auth_audit_event.actor_usernamelog_attributes['auth_audit_event.actor_username']auth_audit_event.actor_via_ssobooleanmetadata.auth_audit_event.actor_via_ssolog_attributes['auth_audit_event.actor_via_sso']auth_audit_event.audit_log_idstringmetadata.auth_audit_event.audit_log_idlog_attributes['auth_audit_event.audit_log_id']auth_audit_event.created_atstringmetadata.auth_audit_event.created_atlog_attributes['auth_audit_event.created_at']auth_audit_event.log_typestringmetadata.auth_audit_event.log_typelog_attributes['auth_audit_event.log_type']auth_audit_event.request_idstringmetadata.auth_audit_event.request_idlog_attributes['auth_audit_event.request_id']auth_audit_event.user_agentstringmetadata.auth_audit_event.user_agentlog_attributes['auth_audit_event.user_agent']hoststringmetadata.hostlog_attributes['host']levelstringmetadata.levellog_attributes['level']msgstringmetadata.msglog_attributes['msg']request_idstringmetadata.request_idlog_attributes['request_id']request.headers.traceparentstringmetadata.request.headers.traceparentlog_attributes['request.headers.traceparent']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: storage_logs
event_messagestringidstringcontext.hoststringmetadata.context.hostlog_attributes['context.host']context.pidnumbermetadata.context.pidlog_attributes['context.pid']levelstringmetadata.levellog_attributes['level']projectstringmetadata.projectlog_attributes['project']rawErrorstringmetadata.rawErrorlog_attributes['rawError']req.headers.acceptstringmetadata.req.headers.acceptlog_attributes['req.headers.accept']req.headers.cf_connecting_ipstringmetadata.req.headers.cf_connecting_iplog_attributes['req.headers.cf_connecting_ip']req.headers.cf_raystringmetadata.req.headers.cf_raylog_attributes['req.headers.cf_ray']req.headers.content_lengthstringmetadata.req.headers.content_lengthlog_attributes['req.headers.content_length']req.headers.content_typestringmetadata.req.headers.content_typelog_attributes['req.headers.content_type']req.headers.hoststringmetadata.req.headers.hostlog_attributes['req.headers.host']req.headers.refererstringmetadata.req.headers.refererlog_attributes['req.headers.referer']req.headers.user_agentstringmetadata.req.headers.user_agentlog_attributes['req.headers.user_agent']req.headers.x_client_infostringmetadata.req.headers.x_client_infolog_attributes['req.headers.x_client_info']req.headers.x_forwarded_protostringmetadata.req.headers.x_forwarded_protolog_attributes['req.headers.x_forwarded_proto']req.hostnamestringmetadata.req.hostnamelog_attributes['req.hostname']req.methodstringmetadata.req.methodlog_attributes['req.method']req.remoteAddressstringmetadata.req.remoteAddresslog_attributes['req.remoteAddress']req.remotePortnumbermetadata.req.remotePortlog_attributes['req.remotePort']req.urlstringmetadata.req.urllog_attributes['req.url']reqIdstringmetadata.reqIdlog_attributes['reqId']request_idstringmetadata.request_idlog_attributes['request_id']request.headers.traceparentstringmetadata.request.headers.traceparentlog_attributes['request.headers.traceparent']res.headers.content_lengthnumbermetadata.res.headers.content_lengthlog_attributes['res.headers.content_length']res.headers.content_typestringmetadata.res.headers.content_typelog_attributes['res.headers.content_type']res.statusCodenumbermetadata.res.statusCodelog_attributes['res.statusCode']responseTimenumbermetadata.responseTimelog_attributes['responseTime']span_idstringmetadata.span_idlog_attributes['span_id']tenantIdstringmetadata.tenantIdlog_attributes['tenantId']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: function_edge_logs
event_messagestringidstringdeployment_idstringmetadata.deployment_idlog_attributes['deployment_id']execution_time_msnumbermetadata.execution_time_mslog_attributes['execution_time_ms']function_idstringmetadata.function_idlog_attributes['function_id']project_refstringmetadata.project_reflog_attributes['project_ref']request_idstringmetadata.request_idlog_attributes['request_id']request.headers.acceptstringmetadata.request.headers.acceptlog_attributes['request.headers.accept']request.headers.content_lengthstringmetadata.request.headers.content_lengthlog_attributes['request.headers.content_length']request.headers.hoststringmetadata.request.headers.hostlog_attributes['request.headers.host']request.headers.traceparentstringmetadata.request.headers.traceparentlog_attributes['request.headers.traceparent']request.headers.user_agentstringmetadata.request.headers.user_agentlog_attributes['request.headers.user_agent']request.hoststringmetadata.request.hostlog_attributes['request.host']request.methodstringmetadata.request.methodlog_attributes['request.method']request.pathnamestringmetadata.request.pathnamelog_attributes['request.pathname']request.protocolstringmetadata.request.protocollog_attributes['request.protocol']request.urlstringmetadata.request.urllog_attributes['request.url']response.headers.content_lengthstringmetadata.response.headers.content_lengthlog_attributes['response.headers.content_length']response.headers.content_typestringmetadata.response.headers.content_typelog_attributes['response.headers.content_type']response.headers.datestringmetadata.response.headers.datelog_attributes['response.headers.date']response.headers.serverstringmetadata.response.headers.serverlog_attributes['response.headers.server']response.headers.varystringmetadata.response.headers.varylog_attributes['response.headers.vary']response.status_codenumbermetadata.response.status_codelog_attributes['response.status_code']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']versionstringmetadata.versionlog_attributes['version']severity_textStringsourceStringtimestampdatetimeSource: function_logs
event_messagestringidstringdeployment_idstringmetadata.deployment_idlog_attributes['deployment_id']event_typestringmetadata.event_typelog_attributes['event_type']execution_idstringmetadata.execution_idlog_attributes['execution_id']function_idstringmetadata.function_idlog_attributes['function_id']levelstringmetadata.levellog_attributes['level']project_refstringmetadata.project_reflog_attributes['project_ref']regionstringmetadata.regionlog_attributes['region']request_idstringmetadata.request_idlog_attributes['request_id']span_idstringmetadata.span_idlog_attributes['span_id']timestampstringmetadata.timestamplog_attributes['timestamp']trace_idstringmetadata.trace_idlog_attributes['trace_id']versionstringmetadata.versionlog_attributes['version']severity_textStringsourceStringtimestampdatetimeSource: postgres_logs
event_messagestringidstringidentifierstringidentifierlog_attributes['identifier']hoststringmetadata.hostlog_attributes['host']parsed.backend_typestringmetadata.parsed.backend_typelog_attributes['parsed.backend_type']parsed.command_tagstringmetadata.parsed.command_taglog_attributes['parsed.command_tag']parsed.connection_fromstringmetadata.parsed.connection_fromlog_attributes['parsed.connection_from']parsed.database_namestringmetadata.parsed.database_namelog_attributes['parsed.database_name']parsed.error_severitystringmetadata.parsed.error_severitylog_attributes['parsed.error_severity']parsed.process_idnumbermetadata.parsed.process_idlog_attributes['parsed.process_id']parsed.query_idnumbermetadata.parsed.query_idlog_attributes['parsed.query_id']parsed.session_idstringmetadata.parsed.session_idlog_attributes['parsed.session_id']parsed.session_line_numnumbermetadata.parsed.session_line_numlog_attributes['parsed.session_line_num']parsed.session_start_timestringmetadata.parsed.session_start_timelog_attributes['parsed.session_start_time']parsed.sql_state_codestringmetadata.parsed.sql_state_codelog_attributes['parsed.sql_state_code']parsed.timestampstringmetadata.parsed.timestamplog_attributes['parsed.timestamp']parsed.transaction_idnumbermetadata.parsed.transaction_idlog_attributes['parsed.transaction_id']parsed.user_namestringmetadata.parsed.user_namelog_attributes['parsed.user_name']parsed.virtual_transaction_idstringmetadata.parsed.virtual_transaction_idlog_attributes['parsed.virtual_transaction_id']request_idstringmetadata.request_idlog_attributes['request_id']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: realtime_logs
event_messagestringidstringexternal_idstringmetadata.external_idlog_attributes['external_id']levelstringmetadata.levellog_attributes['level']measurements.connectednumbermetadata.measurements.connectedlog_attributes['measurements.connected']measurements.connected_clusternumbermetadata.measurements.connected_clusterlog_attributes['measurements.connected_cluster']measurements.limitnumbermetadata.measurements.limitlog_attributes['measurements.limit']measurements.sumnumbermetadata.measurements.sumlog_attributes['measurements.sum']request_idstringmetadata.request_idlog_attributes['request_id']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: postgrest_logs
event_messagestringidstringidentifierstringidentifierlog_attributes['identifier']hoststringmetadata.hostlog_attributes['host']request_idstringmetadata.request_idlog_attributes['request_id']request.headers.traceparentstringmetadata.request.headers.traceparentlog_attributes['request.headers.traceparent']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: supavisor_logs
event_messagestringidstringcontext.applicationstringmetadata.context.applicationlog_attributes['context.application']context.domainstring[]metadata.context.domainlog_attributes['context.domain']context.filestringmetadata.context.filelog_attributes['context.file']context.functionstringmetadata.context.functionlog_attributes['context.function']context.glstringmetadata.context.gllog_attributes['context.gl']context.linenumbermetadata.context.linelog_attributes['context.line']context.mfastring[]metadata.context.mfalog_attributes['context.mfa']context.modulestringmetadata.context.modulelog_attributes['context.module']context.pidstringmetadata.context.pidlog_attributes['context.pid']context.timenumbermetadata.context.timelog_attributes['context.time']context.vm.nodestringmetadata.context.vm.nodelog_attributes['context.vm.node']db_namestringmetadata.db_namelog_attributes['db_name']instance_idstringmetadata.instance_idlog_attributes['instance_id']levelstringmetadata.levellog_attributes['level']projectstringmetadata.projectlog_attributes['project']regionstringmetadata.regionlog_attributes['region']request_idstringmetadata.request_idlog_attributes['request_id']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']typestringmetadata.typelog_attributes['type']userstringmetadata.userlog_attributes['user']severity_textStringsourceStringtimestampdatetimeSource: pgbouncer_logs
event_messagestringfilestringfilelog_attributes['file']idstringhoststringmetadata.hostlog_attributes['host']request_idstringmetadata.request_idlog_attributes['request_id']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']projectstringprojectlog_attributes['project']severity_textStringsourceStringtimestampdatetimeSource: pg_upgrade_logs
event_messagestringidstringrequest_idstringmetadata.request_idlog_attributes['request_id']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']severity_textStringsourceStringtimestampdatetimeSource: multigres_logs
clusterstringclusterlog_attributes['cluster']componentstringcomponentlog_attributes['component']event_messagestringidstringrequest_idstringmetadata.request_idlog_attributes['request_id']span_idstringmetadata.span_idlog_attributes['span_id']trace_idstringmetadata.trace_idlog_attributes['trace_id']namespacestringnamespacelog_attributes['namespace']node_namestringnode_namelog_attributes['node_name']pod_namestringpod_namelog_attributes['pod_name']projectstringprojectlog_attributes['project']regionstringregionlog_attributes['region']severity_textStringsourceStringstackstringstacklog_attributes['stack']timestampdatetime