Cloudflare Docs
Edit this page on GitHub
Set theme to dark (⇧+D)

DNS Firewall Logs

The descriptions below detail the fields available for dns_firewall_logs.

ClientResponseCodeInteger value of response code. For more information refer to Response
ClusterIDThe ID of the cluster which handled this request.string
ColoCodeIATA airport code of data center that received the request.string
EDNSSubnetEDNS Client Subnet (IPv4 or IPv6). For more information refer to EDNS Client Subnet.string
EDNSSubnetLengthEDNS Client Subnet length. For more information refer to EDNS Client
QueryDOIndicates if the client is capable of handling a signed response (DNSSEC answer OK).bool
QueryNameName of the query that was sent.string
QueryRDIndicates if the client means a recursive query (Recursion Desired).bool
QuerySizeThe size of the query sent from the client in
QueryTCPIndicates if the query from the client was made via TCP (if false, then UDP).bool
QueryTypeInteger value of query type. For more information refer to Query
ResponseCachedWhether the response was cached or not.bool
ResponseCachedStaleWhether the response was cached stale. In other words, the TTL had expired and the upstream nameserver was not reachable.bool
SourceIPIP address of the client (IPv4 or IPv6).string
TimestampTimestamp at which the query or string
UpstreamIPIP of the upstream nameserver (IPv4 or IPv6).string
UpstreamResponseCodeInteger value of response code from the upstream nameserver. For more information refer to Response
UpstreamResponseTimeMsUpstream response time in