Enable Email Security logs

Email Security allows you to configure Logpush to send detection data to an endpoint of your choice.

Prerequisites

Before you can enable Logpush for Email Security, you will have to:

1. Create an R2 bucket.
2. Once you have created your R2 bucket, create an API token. Under Permissions, ensure you select Admin Read & Write.
3. Once you have created your R2 API Token, the dashboard will display an Access Key ID and a Secret Access Key. Save these two, as you will need them to set up Logpush later.

Enable Logpush jobs

To enable Logpush for Email Security:

1. Log in to the Cloudflare dashboard ↗.
2. Select Analytics & Logs > Logpush.
3. Select Create a Logpush job, then select S3-Compatible.
4. Enter the destination details:
   • Bucket (required): Enter the bucket name.
   • Endpoint URL: Enter your endpoint URL. To find your endpoint URL:
     • On the Cloudflare dashboard, go to R2 Object Storage > Overview > Select your bucket.
     • Go to Settings, and copy and paste the S3 API URL.
   • Bucket region: Enter the region of your bucket. To find the bucket region:
     • On the dashboard, go to R2 Object Storage > Overview > Select your bucket.
     • Go to Settings, and find your region in Location.
   • Access Key ID: Enter the Access Key ID you created as a prerequisite.
   • Secret Access Key: Enter the Secret Access Key you created as a prerequisite.
5. Select Continue.

Your destination has now been configured.

To view the job you created:

1. Log in to the Cloudflare dashboard ↗.
2. Go to R2 Object Storage, select your bucket.
3. Select Objects.

Audit logs

Once you have configured your destination, you can audit logs:

1. Log in to the Cloudflare dashboard ↗.
2. Select Analytics & Logs > Logpush.
3. Select Audit logs.
4. Under Configure logpush job:

• Job name: Enter the job name.
• If logs match: Select Filtered logs:
  • Field: Choose ResourceType.
  • Operator: Choose starts with.
  • Value: Enter email_security.

5. Select Submit.

Your job has now been created successfully.

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!