---
title: Set payload log settings
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Zero Trust](https://developers.cloudflare.com/api/resources/zero_trust)
[DLP](https://developers.cloudflare.com/api/resources/zero_trust/subresources/dlp)
[Payload Logs](https://developers.cloudflare.com/api/resources/zero_trust/subresources/dlp/subresources/payload_logs)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Set payload log settings
Deprecated
PUT/accounts/{account\_id}/dlp/payload\_log
Enables or disables payload logging for DLP matches. When enabled, matched content is stored for review.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required)
`Zero Trust Write`
##### P ath ParametersExpand Collapse
account\_id: string
[Link to this property](<#(resource)%20zero_trust.dlp.payload_logs%20%3E%20(method)%20update%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)
##### Body ParametersJSONExpand Collapse
masking\_level: optional "full"or "partial"or "clear"or "default"
Masking level for payload logs.
- full: The entire payload is masked.
- partial: Only partial payload content is masked.
- clear: No masking is applied to the payload content.
- default: DLP uses its default masking behavior.
One of the following:
"full"
Link to this property
"partial"
Link to this property
"clear"
Link to this property
"default"
Link to this property
[Link to this property](<#(resource)%20zero_trust.dlp.payload_logs%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20masking_level%20%3E%20(schema)>)
public\_key: optional string
Base64-encoded public key for encrypting payload logs.
- Set to null or empty string to disable payload logging.
- Set to a non-empty base64 string to enable payload logging with the given key.
For customers with configurable payload masking feature rolled out:
- If the field is missing, the existing setting will be kept. Note that this is different from setting to null or empty string.
For all other customers:
- If the field is missing, the existing setting will be cleared.
[Link to this property](<#(resource)%20zero_trust.dlp.payload_logs%20%3E%20(method)%20update%20%3E%20(params)%200%20%3E%20(param)%20public_key%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.dlp.payload_logs%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20zero_trust.dlp.payload_logs%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20zero_trust.dlp.payload_logs%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional object {updated\_at, masking\_level, public\_key }
updated\_at: string
formatdate-time
Link to this property
masking\_level: optional "full"or "partial"or "clear"or "default"
Masking level for payload logs.
- full: The entire payload is masked.
- partial: Only partial payload content is masked.
- clear: No masking is applied to the payload content.
- default: DLP uses its default masking behavior.
One of the following:
"full"
Link to this property
"partial"
Link to this property
"clear"
Link to this property
"default"
Link to this property
Link to this property
public\_key: optional string
Base64-encoded public key for encrypting payload logs. Null when payload logging is disabled.
Link to this property
[Link to this property](<#(resource)%20zero_trust.dlp.payload_logs%20%3E%20(method)%20update%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
### Set payload log settings
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/dlp/payload_log \
-X PUT \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
-d '{}'
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"updated_at": "2019-12-27T18:11:19.117Z",
"masking_level": "full",
"public_key": "public_key"
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"updated_at": "2019-12-27T18:11:19.117Z",
"masking_level": "full",
"public_key": "public_key"
}
}
```