Enable Logpush to Google Cloud Storage
Cloudflare Logpush supports pushing logs directly to Google Cloud Storage (GCS) via the Cloudflare dashboard or via API.
Manage via the Cloudflare dashboard
Enable Logpush to Google Cloud Storage via the dashboard.
To enable the Cloudflare Logpush service:
Select the Enterprise account or domain you want to use with Logpush.
Go to Analytics & Logs > Logs.
Select Add Logpush job.
In Select data set, choose the dataset to push to a storage service, and select Next.
In Select data fields:
- Select the data fields to include in your logs. Add or remove fields later by modifying your settings in Logs > Logpush.
- In Advanced Settings, you can change the Timestamp format (
UnixNano), and enable redaction for
- Under Filters you can select the events to include and/or remove from your logs. For more information, refer to . Not all datasets have this option available.
In Select a destination, choose Google Cloud Storage.
Enter or select the following destination information:
- Bucket path
- Daily subfolders
- For Grant Cloudflare access to upload files to your bucket, make sure your bucket has added Cloudflare’s IAM as a user (if you did not add it already).
Select Validate access.
Enter the Ownership token (included in a file or log Cloudflare sends to your provider) and select Prove ownership. To find the ownership token, select Open in the Overview tab of the ownership challenge file.
Select Save and Start Pushing to finish enabling Logpush.
Once connected, Cloudflare lists Google Cloud Storage as a connected service under Logs > Logpush. Edit or remove connected services from here.
Create and get access to a GCS bucket
Cloudflare uses Google Cloud Identity and Access Management (IAM) to gain access to your bucket. The Cloudflare IAM service account needs admin permission for the bucket.
To enable Logpush to GCS:
In Storage > Browser > Bucket > Permissions, add the member
Storage Object Adminpermission.