How do I create a HAR file and Console logs from my browser for an AWS Support case?
AWS Support asked me to create an HTTP Archive (HAR) file and Console logs from my web browser to help them troubleshoot my support case.
Short description
AWS Support uses a HAR file from your browser to investigate or replicate networking issues that you documented in a technical support case.
Important: You must have a Developer, Business, or Enterprise Support plan to open a technical support case.
Warning: HAR files and Console logs can capture sensitive information, such as user names, passwords, and keys. Before you send a HAR file and Console logs to AWS Support, make sure that you remove any sensitive information.
Resolution
For solutions to common issues with the AWS Management Console, see Troubleshooting.
Create a HAR file in your browser
Note: These instructions were last tested on Google Chrome version 116.0.5845.187, Microsoft Edge (Chromium) Version 116.0.1938.81, and Mozilla Firefox version 115.1.0. Because these browsers are third-party products, these instructions might not match the experience in the latest versions or in the version that you use. In another browser, such as Apple Safari for macOS, the process to generate network activity logs might be similar, but the steps are different.
Google Chrome
Complete the following steps:
- In the browser, at the top right, choose Customize and control Google Chrome. Or, right-click on a blank area on the page, choose Inspect, and then proceed to step 3.
- For More tools, choose Developer tools.
- Choose Network.
- Select Preserve log.
- Choose Clear network log to clear all current network requests, and then choose Record network log.
- Open the AWS Management Console, and then reproduce your issue. Or, follow the steps that AWS Support advises in a local setup.
- In the DevTools panel, open the context (right-click) menu on any network request.
- Choose Save all as HAR with content, and then save the file.
- In the DevTools panel, choose Console.
- Open the context (right-click) menu on any network request, choose Save as..., and then save the file.
For more information, see Chrome DevTools and HAR import and export buttons on the Chrome for Developers website.
Microsoft Edge (Chromium)
Complete the following steps:
- In the browser, at the top right, choose Settings and more. Or, right-click on a blank area on the page, choose Inspect, and then proceed to step 3.
- For More tools, choose Developer tools.
- Choose Network.
- Select the Preserve log check box.
- Choose Clear to clear all current network requests, and then choose Record network log.
- Open the AWS Management Console, and then reproduce your issue. Or, follow the steps that AWS Support advises in a local setup.
- In the DevTools panel, open the context (right-click) menu on any network request.
- Choose Save all as HAR with content, and then save the file.
- In the DevTools panel, choose Console.
- Open the context (right-click) menu on any network request, choose Save as..., and then save the file.
For more information, see Save all network requests to a HAR file on the Network Analysis Reference page of the Microsoft Documentation website.
Mozilla Firefox
Complete the following steps:
- In the browser, at the top right, choose Open Application Menu. Or, right-click on a blank area on the page, choose Inspect, and then proceed to step 3.
- Choose More tools, and then choose Web Developer tools.
- In the Web Developer menu, choose Network. In some versions of Firefox, the Web Developer menu is in the Tools menu.
- Choose the gear icon, and then select Persist Logs.
- Choose the trash can icon to clear all current network requests, and then choose Analyze to start performance analysis.
- Open the AWS Management Console, and then reproduce your issue. Or, follow the steps that AWS Support advises in a local setup.
- In the Network Monitor, open the context (right-click) menu on any network request in the request list.
- Choose Save All As HAR, and then save the file.
- In the DevTools panel, choose Console.
- Open the context (right-click) menu on any console request, choose Save all Messages to File, and then save the file.
For more information, see Network Monitor and Network request list on the Firefox Source Docs website.
Edit the HAR file and Console logs
Complete the following steps:
- Open the file in a text editor application.
- Use the text editor's Find and Replace tools to identify and replace all sensitive information in the file. Also, make sure to remove or mask cookies and authentication headers.
Note: You can replace sensitive information with a generic string, such as "REDACTED_DUE_TO_SECURITY." - Save the edited file and repeat these instructions for the next file.
Submit the HAR file and Console logs
Complete the following steps:
- In the AWS Support Center, under Open support cases, choose your support case.
- In your support case, choose your preferred contact option, attach the edited HAR file and Console logs, and then submit them.
Related information
Could you please add description about Console log into this article? It exists in "Console" panel on Developer Tools and it is as important as HAR file when we investigate a console issue.
Updated article, thank you for the feedback.
I really wish this article had some help for redacting sensitive info... I have no idea which AWS parameters are sensitive or not. Also doing this manually is a huge PITA. I'm having to use silly regexes with sed to fix up the HAR JSON, in order to save myself from a ton of error-prone manual work.
Thank you for your comment. We'll review and update the Knowledge Center article as needed.
Until the review is complete... giving a blanket recommendation on what to redact is a bit of a challenge as there is no standard set of sensitive information. And how that sensitive information is included in the HAR file isn't consistent.
For example, if you capture an authentication attempt to Identity Center using Identity Provider X, the resulting HAR file will very likely show the HTTP call where your sent over your password to Identity Provider X. So you want to remove that password. If you authenticate using Identity Provider Y, the same thing happens.
But where the password is displayed (is it a HTTP query parameter? Is it sent in the body of the HTTP request?) depends on the Identity Provider itself and how the Identity Provider implemented their login flow. Also, if you're already logged into your Identity Provider, it may just forward you along without asking for your password again. So your password may not always be in the HAR file -- it depends on a lot of factors.
At the very least, I would suggest opening the HAR file in a text editor and doing a Find command using the plaintext value of your password. Wherever you find your password, remove it.
Regarding sensitive information about your Amazon environment itself, I wouldn't suggest redacting that. Because different support issues require different types of information. And there's no real way to list all types of support cases and what information is needed to troubleshoot.
Thank you for your comment. We'll review and update the Knowledge Center article as needed.
Relevant content
- Accepted Answerasked 2 years ago
- asked 8 months ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 10 months ago
- AWS OFFICIALUpdated 8 months ago
- AWS OFFICIALUpdated 7 months ago
