Review detailed logs for your Zero Trust organization.
Cloudflare stores Zero Trust logs for different periods of time based on the service and plan type:
| Free | Standard | Access | Gateway | Enterprise | |
|---|---|---|---|---|---|
| Admin logs | 18 months | 18 months | 18 months | 18 months | 18 months |
| Access logs | 24 hours | 30 days | 30 days | 24 hours | 180 days |
| DNS logs | 24 hours | 30 days | 24 hours | 30 days | 180 days1 |
| Network logs | 24 hours | 30 days | 24 hours | 30 days | 30 days |
| HTTP logs | 24 hours | 30 days | 24 hours | 30 days | 30 days |
| DEX logs | 7 days | 7 days | 7 days | 7 days | 7 days |
| Device posture logs | 30 days | 30 days | 30 days | 30 days | 30 days |
Log Explorer users can store Zero Trust logs directly within Cloudflare in an R2 bucket and access them with the dashboard or API. Log Explorer supports the following Zero Trust datasets:
- Access requests (
FROM access_requests) - CASB Findings (
FROM casb_findings) - Device posture results (
FROM device_posture_results) - Gateway DNS (
FROM gateway_dns) - Gateway HTTP (
FROM gateway_http) - Gateway Network (
FROM gateway_network) - Zero Trust Network Session Logs (
FROM zero_trust_network_sessions)
For more information, refer to Log Explorer.
You can use Cloudflare Zero Trust with the Data Localization Suite to restrict data storage to a specific geographic region. For more information, refer to Customer Metadata Boundary.
For more information on how we use this data, refer to our Privacy Policy ↗.