# Media server log content

**URL:** https://forums.plex.tv/t/media-server-log-content/141134
**Category:** General Discussions
**Created:** [April 4, 2016, 6:02pm UTC](https://forums.plex.tv/t/media-server-log-content/141134 "2016-04-04T18:02:58Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![mwitt](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@mwitt](https://forums.plex.tv/u/mwitt)
#### Post date: [April 4, 2016, 6:02pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/1 "2016-04-04T18:02:58Z")

</div>

Hi,  
I have set up Splunk and are looking at the Plex Media Server logs to generate some interesting dashboards on usage, etc.

Looking in to this, I have a few questions that our men in black with big-toe shoes might be able to answer:-).

There is statistics being reported with the following format:

Apr 04, 2016 18:50:43:696 [3368] VERBOSE - Statistics: (My SM-G935F) Reporting 1007 bytes for account 4371812 on LAN: 0

Question 1: the “account 4371812”, is that the user account for PLEX centrally that is unique for the user, plex client or device used? Is there a relation to the x-plex-token?  
Question 2: the “Reporting 1007 bytes”, is this really bytes or kbytes or megabytes, it does not represent the amount of data sent to the client, I have checked this against firewall logs and it does not compute  
Question 3: the “LAN: 0” is whether the client has connected on the same LAN or not in the form of 0=false and 1=true I guess?  
Question 4: is there a way to associate the x-plex-token to the actual user (seems that the token is actually plex client based)? I can find some usernames in the logs, but the token seems to be used quite a lot.

Best regards  
/Micke

---

<div class="post-metadata">

### Author: ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [April 4, 2016, 6:15pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/2 "2016-04-04T18:15:19Z")

</div>

I don’t know the answers to your questions but,  
if your primary interest is usage statistics of Plex, then you might wanna use this:  
[https://forums.plex.tv/discussion/169591/plexpy-another-plex-monitoring-program/p1#top](https://forums.plex.tv/discussion/169591/plexpy-another-plex-monitoring-program/p1#top)

If you want to get it running with Splunk instead, you might gather some insights by reverse engineering PlexPy.

---

<div class="post-metadata">

### Author: ![mwitt](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@mwitt](https://forums.plex.tv/u/mwitt)
#### Post date: [April 5, 2016, 7:23pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/3 "2016-04-05T19:23:16Z")

</div>

Hi Otto, thanks for the suggestion. I had a look at PlexPy a year back but had some problems getting it to work. The Splunk thing is a bit of a learning experience that I would like to pursue anyway, so I will keep looking, don´t know if I´m technical enough for the reverse engineering, but will give it a try.

Anyone else with some insight?

---

<div class="post-metadata">

### Author: ![anon18523487](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@anon18523487](https://forums.plex.tv/u/anon18523487)
#### Post date: [April 5, 2016, 7:35pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/4 "2016-04-05T19:35:14Z")

</div>

1 - The ID is the user  
2 and 3, don’t know  
4 - There is a setting in PMS to hide the token. Turn that off, restart PMS, and you should find in the log the tokens and the users they are assigned to.

---

<div class="post-metadata">

### Author: ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [April 5, 2016, 7:40pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/5 "2016-04-05T19:40:58Z")

</div>

> @MovieFan.Plex said:  
> 4 - There is a setting in PMS to hide the token. Turn that off, restart PMS, and you should find in the log the tokens and the users they are assigned to.

or follow this guide:  
[https://support.plex.tv/hc/en-us/articles/204059436-Finding-your-account-token-X-Plex-Token](https://support.plex.tv/hc/en-us/articles/204059436-Finding-your-account-token-X-Plex-Token)

---

<div class="post-metadata">

### Author: ![anon18523487](https://avatars.discourse-cdn.com/v4/letter/a/49beb7/32.png) [@anon18523487](https://forums.plex.tv/u/anon18523487)
#### Post date: [April 5, 2016, 7:43pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/6 "2016-04-05T19:43:13Z")

</div>

That only gives you your token. The way I read it, the OP was looking to match tokens to different users not just their own.

---

<div class="post-metadata">

### Author: ![WilhelmStroker](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/wilhelmstroker/32/85549_2.png) [@WilhelmStroker](https://forums.plex.tv/u/WilhelmStroker)
#### Post date: [April 5, 2016, 7:45pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/7 "2016-04-05T19:45:52Z")

</div>

> @mwitt said:  
> Hi Otto, thanks for the suggestion. I had a look at PlexPy a year back but had some problems getting it to work. The Splunk thing is a bit of a learning experience that I would like to pursue anyway, so I will keep looking, don´t know if I´m technical enough for the reverse engineering, but will give it a try.
> 
> Anyone else with some insight?

Plexpy has massively improved over the past year, and I found it extremely easy to set up. It’s a great little tool so i’d give it another go if I were you.

---

<div class="post-metadata">

### Author: ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [April 5, 2016, 7:45pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/8 "2016-04-05T19:45:55Z")

</div>

> @MovieFan.Plex said:  
> That only gives you your token. The way I read it, the OP was looking to match tokens to different users not just their own.

Right, I missed that.

---

<div class="post-metadata">

### Author: ![mwitt](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@mwitt](https://forums.plex.tv/u/mwitt)
#### Post date: [April 11, 2016, 4:58pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/9 "2016-04-11T16:58:44Z")

</div>

Thanks for the feedback, I guess I have to look in to Plexpy as the log format makes it really hard to understand the relationship between Account, X-Plex-Token, X-Plex-Username and the X-Plex-Device. I would guess that Plexpy uses a combination of lookups in the local Plex server data and usage of the central Plex infrastructure.

Best regards  
/Micke

---

<div class="post-metadata">

### Author: ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)
#### Post date: [January 7, 2020, 9:16pm UTC](https://forums.plex.tv/t/media-server-log-content/141134/10 "2020-01-07T21:16:29Z")

</div>


