diff --git a/src/content/docs/cloudflare-one/insights/logs/gateway-logs/index.mdx b/src/content/docs/cloudflare-one/insights/logs/gateway-logs/index.mdx index f9d91edebba1015..c0656b6179f4211 100644 --- a/src/content/docs/cloudflare-one/insights/logs/gateway-logs/index.mdx +++ b/src/content/docs/cloudflare-one/insights/logs/gateway-logs/index.mdx @@ -195,19 +195,19 @@ When an HTTP request results in an error, Gateway logs the first 512 bytes of th #### Basic information -| Field | Description | -| ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | -| **Host** | Hostname in the HTTP header for the HTTP request. | -| **Email** | Email address of the user who made the HTTP request. This is generated by the WARP client. | -| **Action** | The Gateway [Action](/cloudflare-one/policies/gateway/dns-policies/#actions) taken based on the first rule that matched (such as Allow or Block). | -| **Request ID** | Unique ID of the request. | -| **Time** | Date and time of the HTTP request. | -| **Source internal IP** | Private IP address assigned by the user's local network. | -| **User agent** | User agent header sent in the request by the originating device. | -| **Policy details** | Policy corresponding to the decision Gateway made based on the traffic criteria of the request. | -| **DLP profiles** | Name of the matched [DLP profile](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/). | -| **DLP profile entries** | Name of the matched entry within the DLP profile. | -| **Uploaded/downloaded file** | | +| Field | Description | +| ---------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Host** | Hostname in the HTTP header for the HTTP request. Gateway will log the SNI in this field if it responded to the request with a Do Not Inspect action. If Gateway does not receive the SNI, this field will be empty. | +| **Email** | Email address of the user who made the HTTP request. This is generated by the WARP client. | +| **Action** | The Gateway [Action](/cloudflare-one/policies/gateway/dns-policies/#actions) taken based on the first rule that matched (such as Allow or Block). | +| **Request ID** | Unique ID of the request. | +| **Time** | Date and time of the HTTP request. | +| **Source internal IP** | Private IP address assigned by the user's local network. | +| **User agent** | User agent header sent in the request by the originating device. | +| **Policy details** | Policy corresponding to the decision Gateway made based on the traffic criteria of the request. | +| **DLP profiles** | Name of the matched [DLP profile](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/). | +| **DLP profile entries** | Name of the matched entry within the DLP profile. | +| **Uploaded/downloaded file** | | #### Matched policies