Displaying viewers charts and reports Downloading data in CSV format How data in the locations report is related to data in the CloudFront standard logs (access logs)

CloudFront viewers reports

The CloudFront console can display four reports about the physical devices (desktop computers, mobile devices) and about the viewers (typically web browsers) that are accessing your content:

Devices – The type of the devices that your users use most frequently to access your content, for example, Desktop or Mobile.
Browsers – The name (or the name and version) of the browsers that your users use most frequently to access your content, for example, Chrome or Firefox. The report lists the top 10 browsers.
Operating systems – The name (or the name and version) of the operating system that viewers run on most frequently when accessing your content, for example, Linux, macOS, or Windows. The report lists the top 10 operating systems.
Locations – The locations, by country or by U.S. state/territory, of the viewers that access your content most frequently. The report lists the top 50 countries or U.S. states/territories.

You can display all four Viewers reports for any date range in the previous 60 days. For the Locations report, you can also display the report with data points every hour for any date range of up to 14 days in the previous 60 days.

Note

You don't need to enable access logging to view Viewers charts and reports.

Topics

Displaying viewers charts and reports
Downloading data in CSV format
How data in the locations report is related to data in the CloudFront standard logs (access logs)

Displaying viewers charts and reports

To display CloudFront viewers charts and reports, perform the following procedure.

To display CloudFront viewers charts and reports

Sign in to the AWS Management Console and open the CloudFront console at https://console.aws.amazon.com/cloudfront/v3/home.
In the navigation pane, click Viewers.
In the CloudFront Viewers pane, for Start Date and End Date, select the date range for which you want to display viewer charts and reports.

For the Locations chart, available ranges depend on the value that you select for Granularity:
- Daily – To display charts with one data point per day, select any date range in the previous 60 days.
- Hourly – To display charts with one data point every hour, select any date range of up to 14 days within the previous 60 days.
Dates and times are in Coordinated Universal Time (UTC).
(Browsers and Operating Systems charts only) For Grouping, specify whether you want to group browsers and operating systems by name (Chrome, Firefox) or by name and version (Chrome 40.0, Firefox 35.0).
(Locations chart only) For Granularity, specify whether to display one data point per day or one data point per hour in the charts. If you specify a date range greater than 14 days, the option to specify one data point per hour is not available.
(Locations chart only) For Details, specify whether to display the top locations by countries or by U.S. states.
In the Distribution list, select the distribution for which you want to display data in the usage charts:
- An individual distribution – The charts display data for the selected CloudFront distribution. The Distribution list displays the distribution ID and an alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.
- All distributions (excludes deleted) – The charts display summed data for all distributions that are associated with the current AWS account, excluding distributions that you have deleted.
Click Update.
To view data for a daily or hourly data point within a chart, move your mouse pointer over the data point.

Downloading data in CSV format

You can download each of the viewer reports in CSV format. This section explains how to download the reports and describes the values in the report.

To download the viewer reports in CSV format

While viewing the Viewer report, click CSV.
Choose the data that you want to download, for example, Devices or Devices Trends.
In the Opening file name dialog box, choose whether to open or save the file.

Information about the reports

The first few rows of each report includes the following information:

Version: The version of the format for this CSV file.
Report: The name of the report.
DistributionID: The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.
StartDateUTC: The beginning of the date range for which you ran the report, in Coordinated Universal Time (UTC).
EndDateUTC: The end of the date range for which you ran the report, in Coordinated Universal Time (UTC).
GeneratedTimeUTC: The date and time on which you ran the report, in Coordinated Universal Time (UTC).
Grouping (browsers and operating systems reports only): Whether the data is grouped by the name or by the name and version of the browser or operating system.
Granularity: Whether each row in the report represents one hour or one day.
Details (locations report only): Whether requests are listed by country or by U.S. state.

Devices report

The report includes the following values:

DistributionID: The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.
FriendlyName: An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.
Requests: The number of requests that CloudFront received from each type of device.
RequestsPct: The number of requests that CloudFront received from each type of device as a percentage of the total number of requests that CloudFront received from all devices.

Device trends report

The report includes the following values:

DistributionID: The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.
FriendlyName: An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.
TimeBucket: The hour or the day that the data applies to, in Coordinated Universal Time (UTC).
Desktop: The number of requests that CloudFront received from desktop computers during the period.
Mobile: The number of requests that CloudFront received from mobile devices during the period. Mobile devices can include both tablets and mobile phones. If CloudFront can't determine whether a request originated from a mobile device or a tablet, it's counted in the Mobile column.
Smart-TV: The number of requests that CloudFront received from smart TVs during the period.
Tablet: The number of requests that CloudFront received from tablets during the period. If CloudFront can't determine whether a request originated from a mobile device or a tablet, it's counted in the Mobile column.
Unknown: Requests for which the value of the User-Agent HTTP header was not associated with one of the standard device types, for example, Desktop or Mobile.
Empty: The number of requests that CloudFront received that didn't include a value in the HTTP User-Agent header during the period.

Browsers report

The report includes the following values:

DistributionID

The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.

FriendlyName

An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.

Group

The browser or the browser and version that CloudFront received requests from, depending on the value of Grouping. In addition to browser names, possible values include the following:

Bot/Crawler – primarily requests from search engines that are indexing your content.
Empty – requests for which the value of the User-Agent HTTP header was empty.
Other – browsers that CloudFront identified but that aren't among the most popular. If Bot/Crawler, Empty, and/or Unknown don't appear among the first nine values, then they're also included in Other.
Unknown – requests for which the value of the User-Agent HTTP header was not associated with a standard browser. Most requests in this category come from custom applications or scripts.

Requests

The number of requests that CloudFront received from each type of browser.

RequestsPct

The number of requests that CloudFront received from each type of browser as a percentage of the total number of requests that CloudFront received during the time period.

Browser trends report

The report includes the following values:

DistributionID

The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.

FriendlyName

An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.

TimeBucket

The hour or the day that the data applies to, in Coordinated Universal Time (UTC).

(Browsers)

The remaining columns in the report list the browsers or the browsers and their versions, depending on the value of Grouping. In addition to browser names, possible values include the following:

Bot/Crawler – primarily requests from search engines that are indexing your content.
Empty – requests for which the value of the User-Agent HTTP header was empty.
Other – browsers that CloudFront identified but that aren't among the most popular. If Bot/Crawler, Empty, and/or Unknown don't appear among the first nine values, then they're also included in Other.
Unknown – requests for which the value of the User-Agent HTTP header was not associated with a standard browser. Most requests in this category come from custom applications or scripts.

Operating systems report

The report includes the following values:

DistributionID

The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.

FriendlyName

An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.

Group

The operating system or the operating system and version that CloudFront received requests from, depending on the value of Grouping. In addition to operating system names, possible values include the following:

Bot/Crawler – primarily requests from search engines that are indexing your content.
Empty – requests for which the value of the User-Agent HTTP header was empty.
Other – operating systems that CloudFront identified but that aren't among the most popular. If Bot/Crawler, Empty, and/or Unknown don't appear among the first nine values, then they're also included in Other.
Unknown – requests for which the value of the User-Agent HTTP header was not associated with a standard browser. Most requests in this category come from custom applications or scripts.

Requests

The number of requests that CloudFront received from each type of operating system.

RequestsPct

The number of requests that CloudFront received from each type of operating system as a percentage of the total number of requests that CloudFront received during the time period.

Operating system trends report

The report includes the following values:

DistributionID

The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.

FriendlyName

An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.

TimeBucket

The hour or the day that the data applies to, in Coordinated Universal Time (UTC).

(Operating systems)

The remaining columns in the report list the operating systems or the operating systems and their versions, depending on the value of Grouping. In addition to operating system names, possible values include the following:

Bot/Crawler – primarily requests from search engines that are indexing your content.
Empty – requests for which the value of the User-Agent HTTP header was empty.
Other – operating systems that CloudFront identified but that aren't among the most popular. If Bot/Crawler, Empty, and/or Unknown don't appear among the first nine values, then they're also included in Other.
Unknown – requests for which the operating system isn't specified in the User-Agent HTTP header.

Locations report

The report includes the following values:

DistributionID: The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.
FriendlyName: An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.
LocationCode: The abbreviation for the location that CloudFront received requests from. For more information about possible values, see the description of Location in How data in the locations report is related to data in the CloudFront standard logs (access logs).
LocationName: The name of the location that CloudFront received requests from.
Requests: The number of requests that CloudFront received from each location.
RequestsPct: The number of requests that CloudFront received from each location as a percentage of the total number of requests that CloudFront received from all locations during the time period.
TotalBytes: The number of bytes that CloudFront served to viewers in this country or state, for the specified distribution and period.

Location trends report

The report includes the following values:

DistributionID: The ID of the distribution that you ran the report for, or ALL if you ran the report for all distributions.
FriendlyName: An alternate domain name (CNAME) for the distribution, if any. If a distribution has no alternate domain names, the list includes an origin domain name for the distribution.
TimeBucket: The hour or the day that the data applies to, in Coordinated Universal Time (UTC).
(Locations): The remaining columns in the report list the locations that CloudFront received requests from. For more information about possible values, see the description of Location in How data in the locations report is related to data in the CloudFront standard logs (access logs).

How data in the locations report is related to data in the CloudFront standard logs (access logs)

The following list shows how data in the Locations report in the CloudFront console corresponds with values in CloudFront access logs. For more information about CloudFront access logs, see Configuring and using standard logs (access logs).

Location

The country or U.S. state that the viewer is in. In access logs, the c-ip column contains the IP address of the device that the viewer is running on. We use geolocation data to identify the geographic location of the device based on the IP address.

If you're displaying the Locations report by country, note that the country list is based on ISO 3166-2, Codes for the representation of names of countries and their subdivisions – Part 2: Country subdivision code. The country list includes the following additional values:

Anonymous Proxy – The request originated from an anonymous proxy.
Satellite Provider – The request originated from a satellite provider that provides internet service to multiple countries. Users might be in countries with a high risk of fraud.
Europe (Unknown) – The request originated from an IP in a block that is used by multiple European countries. The country that the request originated from cannot be determined. CloudFront uses Europe (Unknown) as the default.
Asia/Pacific (Unknown) – The request originated from an IP in a block that is used by multiple countries in the Asia/Pacific region. The country that the request originated from cannot be determined. CloudFront uses Asia/Pacific (Unknown) as the default.

If you display the Locations report by U.S. state, note that the report can include U.S. territories and U.S. Armed Forces regions.

Note

If CloudFront can't determine a user's location, the location will appear as Unknown in viewer reports.

Request Count

The total number of requests from the country or U.S. state that the viewer is in, for the specified distribution and period. This value generally corresponds closely with the number of GET requests from IP addresses in that country or state in CloudFront access logs.

Request %

One of the following, depending on the value that you selected for Details:

Countries – The requests from this country as a percentage of the total number of requests.
U.S. States – The requests from this state as a percentage of the total number of requests from the United States.

If requests came from more than 50 countries, then you can't calculate Request % based on the data in this table because the Request Count column doesn't include all of the requests during the specified period.

Bytes

The number of bytes that CloudFront served to viewers in this country or state, for the specified distribution and period. To change the display of data in this column to KB, MB, or GB, click the link in the column heading.

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

CloudFront usage reports

Monitoring CloudFront metrics with Amazon CloudWatch