Umbral Logs

When something breaks at 3am, the difference between a five-minute fix and a two-hour hunt is the log line. Umbral Logs gives you structured, per-request logging with the real client IP resolved from your trusted-proxy setup — so behind nginx you log the caller, not the proxy, and never a header an attacker can forge to poison your logs. Sampling and status filters keep the volume sane on a busy service.

Install

cargo add umbral-logs

Wire it up

use umbral::prelude::*;
use umbral_logs::LogsPlugin;

let app = App::builder()
    .database("default", pool)
    .plugin(
        LogsPlugin::default()
            .exclude_prefix("/static")   // don't log asset traffic
            .min_status(400),            // only capture errors on this route set
    )
    .build()?;

Target: sample a high-traffic endpoint

On an endpoint doing thousands of req/s you don't want every line — sample a fraction and keep the signal without the cost.

LogsPlugin::default().sample_rate(0.05);  // log 5% of requests

What you get

• Structured, per-request log lines
• Real client IP from your trusted-proxy config (not a forgeable header)
• Exclude noisy prefixes (/static, health checks)
• Sample rate + minimum-status filters to control volume
• Pairs with the framework's trusted-proxy client-IP resolution