Skip to content
Visit Gateway on GitHub
Set theme to dark (⇧+D)

Activity Log

The Activity log allows you to see individual DNS queries made from your locations or, for paid subscribers, HTTP requests made from WARP clients. You can use the Activity log to investigate anomalies in your network. You can search by the DNS query or HTTP request and investigate each by clicking on a row.


Gateway activity log

When you click on the row, you can see information related to the identity that is making the DNS request and attributes relevant to the DNS queries.

Gateway activity log expanded

Explanation of the fields


The name of the domain that was queried.

Request type

The DNS query type. This page contains a list of all the DNS query types.


What Action Gateway applied. For example: Allowed, Blocked etc.

Source IP

The public source IP of the DNS request.


The timestamp of the DNS query.


The location from where the DNS query was made.

Protocol type

The protocol that was used to make the DNS query.


The port that was used to make the DNS request.


The name of the policy if it applies to the DNS request.


Category or categories associated with the DNS request.


Explanation of the fields


The hostname in the HTTP header for the HTTP request.


The HTTP method used for the request (e.g., GET, POST, etc.)


The Gateway action taken based on the first rule that matched. For example: Allowed, Blocked, Bypass, etc.


The timestamp of the HTTP request


The full URL of the HTTP request


The ID of the device that made the request. This is generated by the WARP client on the device that created the request.


The Referer request header contains the address of the page making the request.

User Agent

The user agent header sent in the request by the originating device.

File Name

File name string if a file transfer occurred or was attempted.

HTTP Version

The HTTP version of the origin that Gateway connected to on behalf of the user.

Policy Details

The policy corresponding to the decision Gateway made based on the traffic criteria of the request.