Push logs of your HTTP requests, Spectrum events, or Firewall events to your cloud service in batches as soon as possible. Logpush is available to customers on Cloudflare's Enterprise plan.
Cloudflare pushes logs approximately every 100000 records or 30 seconds, whichever comes first. Keep in mind that these numbers are an estimate - logs are pushed more frequently when possible.
Prior to mid-2020, Logpush sent logs once every five minutes (referred to as Logpush v1). The change to more frequent log pushing allows Cloudflare to deliver information to you as close to real time as possible in smaller files. You may receive log files that contain fewer lines - that’s expected.
If enabling via the API, you can push to the following storage services:
You also can push to the following SIEMs and log management providers: