Cloudflare Logs

Granular Insights Into Your Traffic
Illustration of Cloudflare integration with IBM QRadar

Improve your application’s performance and security by tuning your Cloudflare configuration. Investigate and debug errors and security mitigations reported by your end users. Build customized analytics in the tools you already use.

Currently available for Enterprise customers. Contact Cloudflare Support or your Customer Success Manager to activate today. See our developer documentation for details.

Illustration of Cloudflare integration with IBM QRadar

Get comprehensive metadata on your domain’s requests


Challenge: Optimizing user experience while keeping attackers at bay is difficult without a deep understanding of your traffic-down to the individual request.

Solution: Cloudflare provides detailed logs of your HTTP requests. Use these logs to debug, identify configuration adjustments to improve performance and security, and create custom analytics. Combine request logs with other data sources, such as application server logs, for end-to-end visibility.


Push directly to your preferred storage provider

Have your Cloudflare request logs sent to your preferred storage provider and use the tools you already know to gain insights. Correlate with logs from other services for a comprehensive view of your systems.

Reduce deployment time and configuration errors by using our Dashboard UI and auto-generated bucket policies. Quickly configure dozens or hundreds of domains using an API.

Pull logs with a REST API


Write custom scripts to retrieve your logs continually using our powerful REST API. Build and operate your own log retrieval service to meet your specific log analysis requirements.

Pull logs as you need them by specifying time ranges and data fields. Control volume using count and sample parameters.


Key Features

Retrieve request logs over HTTP with a REST API
Specify time ranges, sample rates, and timestamp formats
Select from 50+ fields related to client, origin, firewall, cache, and Cloudflare routing
Have your logs pushed to your preferred cloud storage provider
Receive compressed files (approximately 5-10% of original size)
Reduce setup time using dashboard integrations with Amazon S3, Azure Blob, Datadog, Elastic, Google Data Studio, Looker, Datadog, Splunk, and Sumo Logic
Supports the following zone-scoped data sets: Firewall events, HTTP requests, NEL reports, and Spectrum events
Supports the following account-scoped data sets: Audits logs, Gateway DNS, and Gateway HTTP