Overview
Types of analytics
Account and zone analytics
Zone Analytics
Account analytics (beta)
Cloudflare analytics with Workers
Status codes
Threat types
Total threats stopped
Network analytics
Get started
About
Concepts
Main dashboard
Configure
Adjust the time range
Adjust the displayed data
Share and export data
Reference
Data collection
Network Analytics v1 (deprecated)
Web analytics
Get started
Web Analytics for SPAs
Notifications
Understanding Cloudflare Web Analytics
Core Web Vitals
Data origin and collection
Dimensions
High-level metrics
Page load time summary
Limits
Configuring Cloudflare Web Analytics
Filters
Rules
Changelog
GraphQL Analytics API
Get started
Authentication
Configure an Analytics API token
Authenticate with a Cloudflare API key
Configure GraphQL client endpoint and HTTP headers
Querying basics
Explore the GraphQL schema
Compose a query in GraphiQL
Execute a GraphQL query with curl
Features
Datasets (tables)
Discovery
Introspection
Settings node
Filtering
Sorting
Pagination
Nested Structures
Error responses
Limits
Sampling
Tutorials
Build your own Analytics dashboard
Use GraphQL to create widgets
Export GraphQL data to CSV
Querying Access login events with GraphQL
Querying Firewall Events with GraphQL
Querying HTTP events by hostname with GraphQL
Querying Magic Firewall Intrusion Detection System (IDS) samples with GraphQL
Querying Magic Firewall Samples with GraphQL
Querying Magic Transit and Magic WAN tunnel bandwidth analytics with GraphQL
Querying Magic Transit and Magic WAN tunnel health check results with GraphQL
Querying Workers Metrics with GraphQL
Migration guides
HTTP Requests by Colo Groups to HTTP Requests by Adaptive Groups
Zone Analytics to GraphQL Analytics
Zone Analytics Colos Endpoint to GraphQL Analytics
Network Analytics v1 to Network Analytics v2
Main differences
NAv2 node reference
NAv1 to NAv2 schema map
Workers Analytics Engine
Get started
Examples
Usage-based billing
SQL API
SQL Reference
Querying from Grafana
Querying from a Worker
Sampling with WAE
Pricing
Limits
Analytics integrations
Datadog
Elastic
Google Cloud
Graylog
Looker
New Relic
Splunk
FAQs
About Cloudflare Analytics
Workers Analytics Engine FAQs
Web Analytics FAQs
Other FAQs

Data collection

For the purposes of mitigating DDoS attacks and providing traffic visibility through the Network Analytics dashboard, Cloudflare collects data from different protocols such as IP, IPv6, TCP, UDP, ICMP, GRE, and DNS.