What data is collected by Mashery on each proxied API call?

We collect the following data for each API call we proxy:

  • Traditional Apache-style HTTP request log entry.
  • The complete inbound HTTP message. This includes all headers, HTTP POST Method bodies, etc. In other words, everything that the user's code sent when making the API call.
  • A log of changes we make to the call (if any) before passing it along to the API endpoint. This might include things like swapping credentials, adding/stripping headers, etc.
  • A list of diagnostic information regarding the request our server makes to the endpoint. When we receive that response, we have access to the following bits of information:
    • Effective URL. The URL we make the request to, including query string parameters (if any).
    • HTTP Code. The last HTTP response code received from the request we make.
    • File Time. Remote time of the retrieved document/response. Often not available (thus logged as -1), but we save it if we get it.
    • Total Time. Total transaction time in seconds for the request/response.
    • Name Lookup Time. Time in seconds until name resolving was complete.
    • Connect Time. Time in seconds it took to establish the connection.
    • Pre-Transfer Time. Time in seconds from the beginning of the connection until just before the response transfer begins.
    • Start Transfer Time. Time in seconds until the first byte is about to be transferred.
    • Redirect Time. Time in seconds of all redirection steps (if any) before the final transaction begins.
    • Size Upload. Total number of bytes sent in our request.
    • Size Download. Total number of bytes received.
    • Header Size. Total size of all headers received.
    • The complete body of the response received by the endpoint.
    • The length of the processing time from the moment we received the request to the moment we return a response.

The inbound and outbound HTTP messages can be filtered prior to logging. For example, if an API request/response has binary data, we drop that before logging the data by default.

Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled it to make a type specimen book. It has survived not only five centuries, but also the leap into electronic typesetting, remaining essentially unchanged. It was popularised in the 1960s with the release of Letraset sheets containing Lorem Ipsum passages, and more recently with desktop publishing software like Aldus PageMaker including versions of Lorem Ipsum.