Manage via the Cloudflare UI

Before enabling Cloudflare Logpush, make sure that you have already configured a destination in your cloud service.

Learn how to set up a destination for:

To enable the Clouflare Logpush service:

  1. Log in to the Cloudflare dashboard

  2. Ensure the Enterprise domain you want to use with Logpush is selected

  3. Select the Analytics app in the top menu

  4. Select the Logs section in the secondary menu

  5. Select Connect a service. A modal window opens where you will need to complete several steps

  6. Under Select service, pick your cloud service provider and click Next

Complete either step 7, 8, 9, or 10 below based on you provider, then continue to step 11

  1. For Amazon S3, enter or select the following:

    • Bucket path
    • Daily subfolders
    • Bucket regionEncryption constraint in bucket policy
    • For Grant Cloudflare access to upload files to your bucket, make sure your bucket has a policy (if you did not add it already):
      • Copy the JSON policy, then go to your bucket in the Amazon S3 console and paste the policy in Permissions > Bucket Policy and click Save
  2. For Google Cloud Storage, enter or select the following:

    • Bucket path
    • Daily subfolders
    • For Grant Cloudflare access to upload files to your bucket, make sure your bucket has a Cloudflare IAM user (if you did not add it already):
  3. For Microsoft Azure, enter or select the following:

    • SAS URL
    • Blob container subpath (optional)
    • Daily subfolders
  4. For Sumo Logic, enter or select the following:

  5. In the Cloudflare dashboard, click Validate access

  6. Follow the on-screen instructions to enter the Ownership token (included in a file or log Cloudflare sends to your provider), then click Prove ownership

Tips for seeing the token:

  • Amazon S3: click the Open button in the Overview tab of the ownership challenge file
  • Microsoft Azure: use the Storage Explorer feature to navigate to and open the file
  • Sumo Logic: use the Live Tail feature to see your log containing the token as soon as it's received
  1. Next in the Customize log screen, select the data set in which you're interested (currently HTTP requests or Spectrum events). You can keep the default fields to include in your log or make changes. You can add or remove fields at a later time by modifying your settings in Logs > Logpush (select the wrench icon).

  2. To finish enabling Logpush, click Save and Start Pushing

Once connected, Cloudflare lists the provider you just configured under Logs > Logpush. This is where you can make changes or remove the provider.