Flow Logs | emnify Documentation

The Flow Logs report provides an overview of where your devices communicate. Use it to see which destinations, devices, and countries account for the most traffic over the selected date range, and to drill into the individual flow records behind that traffic.

The report has two kinds of content:

Usage reports (Usage per Domain, Usage per Device, and Usage per Country) show aggregated traffic for the selected date range, up to 90 days.
Flow Details shows individual flow records for the last 30 days. Select one or more devices to populate it.

Questions this report answers

Which destination hostname (if available) or IP address is my fleet exchanging the most data with?
Which devices and countries account for the most upstream and downstream data traffic?
How much data is downloaded versus uploaded for a given destination?
What external services are my devices communicating with?
What are the individual flows behind a device’s traffic, including destination, port, protocol, and timing?

Navigate to this report

Navigate to Reports.

Select Flow Logs from the report list.

Available data

Name	Type	Description
Usage per Domain	Table	Aggregated data volume per destination hostname (if available) or IP address, ranked highest to lowest. See Usage per Domain.
Usage per Device	Table	Aggregated data volume per device, ranked highest to lowest. See Usage per Device.
Usage per Country	Table	Aggregated data volume per country, ranked highest to lowest. See Usage per Country.
Flow Details	Table	Individual flow records for the selected devices over the last 30 days. See Flow Details.

Each usage table shows a horizontal bar behind the byte columns to indicate relative volume across rows. You can sort by any column, search within the table, and page through the results.

Usage per Domain

Aggregated data volume per destination over the selected date range, ranked from highest to lowest by total volume. Each destination is identified by its resolved hostname, when available (for example, i.instagram.com), otherwise by its destination IP address.

Column	Description
Domain	Destination hostname or IP address.
Bytes Up	Upstream data volume (data sent by the device).
Bytes Down	Downstream data volume (data received by the device).
Total Bytes	Combined upstream and downstream volume.

Usage per Device

Aggregated data volume per device over the selected date range, ranked from highest to lowest by total volume.

Column	Description
Device Name	Name of the device.
Device ID	Unique identifier of the device.
Bytes Up	Upstream data volume (data sent by the device).
Bytes Down	Downstream data volume (data received by the device).
Total Bytes	Combined upstream and downstream volume.

Usage per Country

Aggregated data volume per country over the selected date range, ranked from highest to lowest by total volume.

Column	Description
Country (SIM network)	Country of the SIM’s serving network.
Bytes Up	Upstream data volume (data sent by the device).
Bytes Down	Downstream data volume (data received by the device).
Total Bytes	Combined upstream and downstream volume.

Flow Details

Flow Details shows individual (non-aggregated) flow records for the last 30 days. Unlike the aggregated usage tables, it stays empty until you select one or more devices with the Device filter. Until then, each row shows a Select one or more devices to display detailed Flow Logs message.

Column	Description
Domain	Destination hostname or IP address.
Device Name	Name of the device.
Device ID	Unique identifier of the device.
Started On	When the flow started.
Completed On	When the flow ended or was last updated.
Destination IP	IP address of the destination.
Destination Port	Port on the destination.
Protocol	Network protocol used for the flow.
Bytes Up	Upstream data volume (data sent by the device).
Bytes Down	Downstream data volume (data received by the device).
Total Bytes	Combined upstream and downstream volume.

Filters

Global filters apply across all panels in the report.

Filter	Required	Value	Default	Description
Date Range	No	Predefined	Last month	Select a time range. Click the calendar icon to edit. Usage tables aggregate up to 90 days; Flow Details covers the last 30 days.
Workspace	No	Predefined	None	Searchable dropdown listing the Workspaces you have access to. Only available with multiple Workspaces.
Domain	No	Predefined	None	Searchable dropdown listing the destination domains in the selected range.
Device	No	Predefined	None	Searchable dropdown listing your devices. Selecting devices also populates Flow Details.
Tags	No	Predefined	None	Searchable dropdown listing the tags assigned to your devices.

Apply filters

Click the filter icon at the top of the report to open the Filters panel.

Set your desired filters. For Date Range, click the calendar icon to open the time range editor, select a range, and apply it. Optionally, use the Workspace, Domain, Device, and Tags dropdowns to narrow results.

Select Apply Filters to update the report, or Clear All to reset them.

Download report data

Each chart and table in this report includes a menu (vertical dots icon) with download options.

Click the vertical dots icon on the chart or table you want to download.

Select Download, then choose a format:

Export to .CSV — download as a comma-separated values file
Export to Excel — download as an Excel spreadsheet
Download as image — save a screenshot of the chart or table

The same menu also provides Force refresh to reload the data and Enter fullscreen to expand the chart or table.