Log fields

Datasets

The datasets below describe the fields available by log category:

• Zone-scoped datasets
• Account-scoped datasets

API

The list of fields can also be accessed directly from the API using the following endpoints:

• For zone-scoped datasets: https://api.cloudflare.com/client/v4/zones/{zone_id}/logpush/datasets/<DATASET>/fields

• For account-scoped datasets: https://api.cloudflare.com/client/v4/accounts/{account_id}/logpush/datasets/<DATASET>/fields

The <DATASET> argument indicates the log category. For example, http_requests, spectrum_events, firewall_events, nel_reports, or dns_logs.

Availability

• Zone-scoped HTTP requests are available in both Logpush and Logpull.
• Custom fields for HTTP requests are only available in Logpush.
• All other datasets are only available through Logpush.

Deprecation

Deprecated fields remain available to prevent breaking existing jobs. They may eventually become empty values if completely removed. Customers are encouraged to migrate away from deprecated fields if they are using them.

Recommendation

For log field ClientIPClass, Cloudflare recommends using Bot Tags to classify IPs.

Additional resources

For more information on logs available in Cloudflare Zero Trust, refer to Zero Trust logs.

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!