ENF News Bot
Automated News Bot
- Joined
- Apr 15, 2022
- Messages
- 2,591
We've significantly enhanced Log Explorer by adding support for 14 additional Cloudflare product datasets.
This expansion enables Operations and Security Engineers to gain deeper visibility and telemetry across a wider range of Cloudflare services. By integrating these new datasets, users can now access full context to efficiently investigate security incidents, troubleshoot application performance issues, and correlate logged events across different layers (like application and network) within a single interface. This capability is crucial for a complete and cohesive understanding of event flows across your Cloudflare environment.
The newly supported datasets include:
Note
The
You can now use Log Explorer to query and filter with each of these datasets. For example, you can identify an IP address exhibiting suspicious behavior in the
To learn more and get started, refer to the Log Explorer documentation and the Cloudflare Logs documentation.
Continue reading...
This expansion enables Operations and Security Engineers to gain deeper visibility and telemetry across a wider range of Cloudflare services. By integrating these new datasets, users can now access full context to efficiently investigate security incidents, troubleshoot application performance issues, and correlate logged events across different layers (like application and network) within a single interface. This capability is crucial for a complete and cohesive understanding of event flows across your Cloudflare environment.
The newly supported datasets include:
Zone Level
https://developers.cloudflare.com/changelog/rss/#zone-levelDns_logsNel_reportsPage_shield_eventsSpectrum_eventsZaraz_events
Account Level
https://developers.cloudflare.com/changelog/rss/#account-levelAudit LogsAudit_logs_v2Biso_user_actionsDNS firewall logsEmail_security_alertsMagic Firewall IDSNetwork AnalyticsSinkhole HTTPipsec_logs
Note
Auditlog and Auditlog_v2 datasets require audit-log.read permission for querying.The
biso_user_actions dataset requires either the Super Admin or ZT PII role for querying.Example: Correlating logs
https://developers.cloudflare.com/changelog/rss/#example-correlating-logsYou can now use Log Explorer to query and filter with each of these datasets. For example, you can identify an IP address exhibiting suspicious behavior in the
FW_event logs, and then instantly pivot to the Network Analytics logs or Access logs to see its network-level traffic profile or if it bypassed a corporate policy.To learn more and get started, refer to the Log Explorer documentation and the Cloudflare Logs documentation.
Continue reading...