Cloudflare Audit Logs
Cloudflare Audit logs allow you to view audit events from your Cloudflare account. Audit logs give insights into what resources were changed in your Cloudflare organization.
Cloudflare Audit logs will grab 30 days worth of logs for your account and backfill your source. After the initial load, RunReveal will attempt to poll the Cloudflare API to download your new audit logs every 60 seconds.
Ingest Method
Currently, Cloudflare audit logs only support polling the Cloudflare API for new events every minute.
Setup
The two fields we require from your Cloudflare account are your account identifier and an API token.
Account Identifier
To find your account identifier,
- Login to your Cloudflare account
- Navigate to your organization's site settings
- Your account identifier will be listed in the right hand panel near the bottom.
- Click the copy button and paste it into RunReveal
API Token
To generate an API token you can click the Get your API token
link directly under the Account ID section. From there, create a new custom token.
Give the token a name like RunReveal to identify its use. The only permission the token requires is read access to Account Settings
.