# Inconsistent upstream\_addr log

**URL:** <https://www.ruby-forum.com/t/inconsistent-upstream-addr-log/227983>\
**Category:** NGINX\
**Created:** [April 5, 2013, 10:44am UTC](https://www.ruby-forum.com/t/inconsistent-upstream-addr-log/227983 "2013-04-05T10:44:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![casper\_the\_ghost](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/58956e/32.png) [@casper\_the\_ghost](https://www.ruby-forum.com/u/casper_the_ghost)\
**Post date:** [April 5, 2013, 10:44am UTC](https://www.ruby-forum.com/t/inconsistent-upstream-addr-log/227983/1 "2013-04-05T10:44:35Z")

</div>

My log format looks like this

```
log_format vcombined '$host $remote_addr - $remote_user 

```

[$time\_local]  
“$request” ’  
'$status $body\_bytes\_sent “$http\_referer” ’  
'“$http\_user\_agent” “$http\_x\_forwarded\_for” ’  
'$ssl\_cipher $request\_time $gzip\_ratio ’  
‘$upstream\_addr $upstream\_response\_time  
$geoip\_country\_code’;

I get these logs

[www.example.de](http://www.example.de) 192.168.1.1 - - [04/Apr/2013:13:41:58 +0200] “GET  
/de/test/  
HTTP/1.1” 504 383 “-” “Mozilla/5.0 (Windows NT 6.1; rv:20.0)  
Gecko/20100101  
Firefox/20.0” “-” RC4-SHA 120.045 - 10.6.10.10:81, 10.6.10.11:81,  
10.6.10.13:81, 10.6.10.12:81 30.003, 30.000, 30.002, 30.001 DE  
[www.example.de](http://www.example.de) 192.168.1.1 - - [04/Apr/2013:13:41:58 +0200] “GET  
/de/test/  
HTTP/1.1” 504 383 “-” “Mozilla/5.0 (Windows NT 6.1; rv:20.0)  
Gecko/20100101  
Firefox/20.0” “-” RC4-SHA 120.045 - 10.6.10.10:81, 10.6.10.11:81,  
10.6.10.13:81, upstreamgroupname, 10.6.10.12:81 30.003, 30.000, 30.002,  
-,  
30.001 DE  
[www.example.de](http://www.example.de) 192.168.1.1 - - [04/Apr/2013:13:41:58 +0200] “GET  
/de/test/  
HTTP/1.1” 504 383 “-” “Mozilla/5.0 (Windows NT 6.1; rv:20.0)  
Gecko/20100101  
Firefox/20.0” “-” RC4-SHA 120.045 - 10.6.10.10:81, 10.6.10.11:81,  
10.6.10.13:81, 10.6.10.12:81, upstreamgroupname 30.003, 30.000, 30.002,  
30.001, - DE  
[www.example.de](http://www.example.de) 192.168.1.1 - - [04/Apr/2013:13:41:58 +0200] “GET  
/de/test/  
HTTP/1.1” 504 383 “-” “Mozilla/5.0 (Windows NT 6.1; rv:20.0)  
Gecko/20100101  
Firefox/20.0” “-” RC4-SHA 120.045 - upstreamgroupname - DE

I can understand the last and first log line. But what is happening in  
between? Why is the upstreamgroupname and the end or in the middle?

Posted at Nginx Forum:

> **[inconsistent upstream\_addr log](https://forum.nginx.org/read.php?2,238125,238125#msg-238125)**
>
> My log format looks like this log\_format vcombined '$host $remote\_addr - $remote\_user \[$time\_local\] "$request" ' '$status $body\_bytes\_sent "$http\_referer" ' '"$http\_user\_agent" "$http

---

<div class="post-metadata">

**Author:** ![casper\_the\_ghost](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/58956e/32.png) [@casper\_the\_ghost](https://www.ruby-forum.com/u/casper_the_ghost)\
**Post date:** [April 5, 2013, 12:23pm UTC](https://www.ruby-forum.com/t/inconsistent-upstream-addr-log/227983/2 "2013-04-05T12:23:18Z")

</div>

Hello!

On Fri, Apr 05, 2013 at 04:44:11AM -0400, philipp wrote:

> 30.001 DE  
> between? Why is the upstreamgroupname and the end or in the middle?  
> This means all servers during a server lookup were considered down  
> (“no live upstreams” error should appear in logs). If this  
> happens, nginx will mark all upstream servers as up, and will  
> retry a request if allowed by proxy\_next\_upstream.

–  
Maxim D.

> **[nginx: donation](http://nginx.org/en/donation.html)**