← Cloudflare One / cloudflare-one / insights / analytics

Network session analytics

The Network session analytics dashboard provides visibility into your Cloudflare One traffic patterns. This dashboard helps you understand how traffic flows through your network, including on-ramps (how traffic enters Cloudflare, such as the Cloudflare One Client, proxy endpoints (PAC files), Browser Isolation, or Cloudflare Tunnel) and off-ramps (how traffic exits Cloudflare, such as the public Internet or a Cloudflare Tunnel).

The dashboard is based on the Zero Trust network sessions Logpush dataset. For definitions on any field, refer to the dataset schema documentation.

To review Network session analytics:

1. In the Cloudflare dashboard ↗, go to Zero Trust > Insights > Dashboards.
2. Select Network session analytics.

Refer to Insights overview to learn how to use Analytics dashboards together with Analytics Overview and Digital Experience Monitoring (DEX) for complete visibility and troubleshooting.

The Network session analytics dashboard helps you:

• Understand traffic patterns: Visualize how traffic flows through your network infrastructure.
• Monitor bandwidth usage: Track upload, download, and total bytes transferred across your network.
• Identify connection issues: Analyze connection close reasons to troubleshoot network problems.
• Track user and device activity: Monitor unique users and devices accessing your network.

• Session count: Total number of network sessions. Each session represents an individual TCP, UDP, ICMP, or ICMPv6 flow that passes through Gateway.
• Bytes total: Total bytes transferred (upload + download)
• Unique users: Number of distinct users

• World map: Geographic visualization of network traffic by the Cloudflare data center where traffic entered the network (ingress) and where it exited (egress)
• Location list: Top Cloudflare data center locations by ingress and egress session count with accompanying graph
• Change: Shows the total change across ingress and egress for each location

• Top protocols: Most used network protocols (TCP, UDP, ICMP, ICMPv6)
• Top connection close reasons: Common reasons for session termination:
  • Client closed
  • Origin closed
  • Client idle timeout
  • Client error
  • Unknown
  • Client TLS error
  • Origin unreachable
  • Too many new sessions for user
  • Origin TLS error
  • Origin unroutable

For the full list of reasons for session termination, refer to ConnectionCloseReason.

• Zero Trust network sessions Logpush dataset: View detailed logs for individual network sessions.
• Gateway network policies: Configure policies that apply to network traffic.