Cloudflare Docs
Cloudflare Zero Trust
Visit Cloudflare Zero Trust on GitHub
Set theme to dark (⇧+D)

Cloudflare Logpush integration

With Cloudflare’s Logpush service, you can configure the automatic export of Zero Trust logs to third-party storage destinations or to security information and event management (SIEM) tools. Once exported, your team can analyze and audit the data as needed.

​​ Export Zero Trust logs with Logpush

To enable Logpush for Zero Trust logs:

  1. In the Zero Trust dashboard, navigate to Logs > Logpush.
  2. Select Connect a service.
  3. Enter a Job name.
  4. From the drop-down menu, choose the dataset to export.
  5. Next, select the data fields you want to include in the log.
  6. In Advanced settings, choose the timestamp format you prefer, and whether you want to enable logs sampling.
  7. Select Next.
  8. Select the service you want to export your logs to.
  9. Follow the service-specific instructions on the Zero Trust dashboard to validate your destination.

The setup of your Logpush integration is now complete. Logpush will send updated logs every five minutes to your selected destination.

You can configure multiple destinations and add additional fields to your logs by returning to the Logpush page.

​​ Zero Trust datasets

Refer to the Logpush documentation for a list of available fields.

Gateway DNSDNS queries inspected by Cloudflare Gateway
Gateway HTTPHTTP requests inspected by Cloudflare Gateway
Gateway NetworkNetwork packets inspected by Cloudflare Gateway
Audit LogsAuthentication events through Cloudflare Access
Access RequestsHTTP requests to sites protected by Cloudflare Access
CASB FindingsSecurity issues detected by Cloudflare CASB