Flow logs, which are generated based on sessions, record the behaviors that a user accesses network applications. A flow creation log is generated when a new session is created, and a flow aging log is generated when a session ends. Flow logs can be divided into three types: flow syslog, flow elog and flow netstream.