Skip to content
Visit Logs on GitHub
Set theme to dark (⇧+D)

Enable Logpush to Sumo Logic

Cloudflare Logpush supports pushing logs directly to Sumo Logic via the Cloudflare dashboard or via API.

Manage via the Cloudflare dashboard

Enable Logpush to Sumo Logic via the dashboard.

To enable the Cloudflare Logpush service:

  1. Log in to the Cloudflare dashboard.

  2. Select the Enterprise domain you want to use with Logpush.

  3. Go to Analytics > Logs.

  4. Click Connect a service. A modal window opens where you will need to complete several steps.

  5. Select the data set you want to push to a storage service.

  6. Select the data fields to include in your logs. You can add or remove fields later by modifying your settings in Logs > Logpush.

  7. Select Sumo Logic.

  8. Enter or select the HTTP Source Address.

  9. Click Validate access.

  10. Enter the Ownership token (included in a file or log Cloudflare sends to your provider) and click Prove ownership. To find the ownership token, click the Open button in the Overview tab of the ownership challenge file.

  11. Click Save and Start Pushing to finish enabling Logpush.

Once connected, Cloudflare lists Sumo Logic as a connected service under Logs > Logpush. Edit or remove connected services from here.

Manage via API

Cloudflare can send logs to a Hosted Collector with "HTTP Logs & Metrics" as the source. Once you've set up a collector, you simply provide the HTTP Source Address (a unique URL) to which logs can be posted.

Only roles with Cloudflare Log Share edit permissions can read and configure Logpush jobs because job configurations may contain sensitive information. Ensure Log Share permissions are enabled before attempting to read or configure a Logpush job.

To enable Logpush to Sumo Logic:

  1. Configure a Hosted Collector. See instructions from Sumo Logic.

  2. Configure an HTTP Logs & Metrics Source. See instructions from Sumo Logic. The last step indicates how to get the HTTP Source Address (URL).

  3. Provide the HTTP Source Address (URL) when prompted by the Logpush API or UI.