Quilt4Net.Toolkit.Api 0.7.12

Quilt4Net.Toolkit.Api

HTTP request/response logging and correlation tracking middleware for .NET Web Applications.

Captures method, path, headers, query parameters, request/response bodies, client IP, and execution time. Logs to Application Insights and/or standard ILogger.

Get started

Install the NuGet package Quilt4Net.Toolkit.Api and register the service in Program.cs.

var builder = WebApplication.CreateBuilder(args);

builder.AddQuilt4NetLogging()
    .AddHttpRequestLogging();

var app = builder.Build();

app.UseQuilt4NetLogging();

app.Run();

AddQuilt4NetLogging() configures OpenTelemetry resource attributes and registers per-record processors that tag every AppTrace / AppException / AppRequest with service.name, service.version, host.name, deployment.environment, and quilt4net.monitor (see the core Quilt4Net.Toolkit README for details). AddHttpRequestLogging() opts in to HTTP request/response middleware on top of that. By default, all requests to paths starting with /Api are logged.

The old AddQuilt4NetApiLogging() and UseQuilt4NetApiLogging() methods still work but are deprecated.

Correlation ID

CorrelationIdMiddleware reads the X-Correlation-ID header from incoming requests; if no header is present, a new GUID is generated. The id is:

1. Stored in HttpContext.Items["CorrelationId"] for inspection by downstream code.
2. Returned in the response's X-Correlation-ID header — clients can chain the same id to subsequent requests for distributed tracing.
3. Pushed into a logging scope (Logger.BeginScope({ ["CorrelationId"] = id })) for the duration of the request, so every ILogger call made while handling the request inherits the id as a structured property. The Azure Monitor exporter writes it to customDimensions["CorrelationId"] on every resulting AppTrace / AppException / AppRequest row.

KQL pattern for "show me everything from one call chain":

union AppTraces, AppExceptions, AppRequests
| where Properties contains "<your-correlation-id>"
| order by TimeGenerated asc

Or, in the toolkit's LogView Search tab, paste the id into the search box (it filters on both Message and CorrelationId). The Search tab's CorrelationId column also has a click-to-self-search shortcut — click any row's correlation chip and the grid re-runs scoped to that id.

Logging mode

Control where logs are sent using HttpRequestLogMode.

builder.AddQuilt4NetLogging()
    .AddHttpRequestLogging(o =>
    {
        o.LogHttpRequest = HttpRequestLogMode.ApplicationInsights | HttpRequestLogMode.Logger;
    });

Values can be combined with | to log to multiple destinations.

Path filtering

By default, only paths matching ^/Api (case-insensitive) are logged. Override with regex patterns.

builder.AddQuilt4NetLogging()
    .AddHttpRequestLogging(o =>
    {
        o.IncludePaths = [".*"]; // Log all paths
    });

Per-endpoint control

Use [Logging] and [LoggingStream] attributes to override logging behavior on individual endpoints.

[Logging(RequestBody = true, ResponseBody = false)]
public async Task<IActionResult> StreamData() { ... }

[Logging(Enabled = false)]
public IActionResult InternalEndpoint() { ... }

[LoggingStream] // Shorthand for ResponseBody = false
public async Task<IActionResult> StreamEvents() { ... }

The [Logging] attribute can be applied to methods or classes.

Interceptor

Use an interceptor to modify or filter logged data before it is written. This is useful for removing sensitive information such as passwords or API keys.

builder.AddQuilt4NetLogging()
    .AddHttpRequestLogging(o =>
    {
        o.Interceptor = async (request, response, properties, serviceProvider) =>
        {
            // Remove sensitive headers
            request.Headers.Remove("Authorization");
            return (request, response, properties);
        };
    });

Configuration

All options can be set via code or appsettings.json. Code takes priority over appsettings.json, which takes priority over defaults.

Code configuration

builder.AddQuilt4NetLogging()
    .AddHttpRequestLogging(o =>
    {
        o.LogHttpRequest = HttpRequestLogMode.ApplicationInsights;
        o.UseCorrelationId = true;
        o.MaxBodySize = 5_000_000;
        o.IncludePaths = ["^/Api", "^/webhook"];
        o.LogRequestBodyByDefault = true;
        o.LogResponseBodyByDefault = false;
    });

appsettings.json

{
  "Quilt4Net": {
    "ApiLogging": {
      "LogHttpRequest": 1,
      "UseCorrelationId": true,
      "MonitorName": "Quilt4Net",
      "MaxBodySize": 1000000,
      "IncludePaths": ["^/Api"],
      "LogRequestBodyByDefault": true,
      "LogResponseBodyByDefault": false
    }
  }
}

Configuration path: Quilt4Net:ApiLogging

LoggingOptions

Logged data

Request

Response