Cloudflare integration

Overview

The Cloudflare Logpush Connector forwards logs from Cloudflare Logpush API to DNIF. It can ingest multiple datasets (like Zero Trust Network Session Logs, Audit logs, Gateway logs) by configuring separate Logpush jobs.

Prerequisites

• A valid Cloudflare API Token with the appropriate permissions
• Your Cloudflare Account ID
• Bloo platform access credentials

Configuration Steps

1. Get Cloudflare Account ID

1. Log in to the Cloudflare Dashboard
2. Navigate to your desired account
3. Your account_id is visible in the URL:
   https://dash.cloudflare.com/<account_id>/<zone_id>

2. Generate an API Token

1. Visit the API Tokens Page
2. Click Create Token → Create Custom Token
3. Set the following permissions:
   • Account > Logpush Jobs → Edit
   • Account > Logpush Datasets → Edit
4. Set Account Scope to the relevant account
5. Click Continue to Summary, then Create Token
6. Copy and store the token securely (this is your api_token)

3. Choose Dataset

• Select an account-based dataset from the list provided during setup

Configuration Parameters

Use the following configuration parameters to forward logs via the Cloudflare Logpush Connector to DNIF.

Field	Description
Connector Name	A unique name for your Cloudflare connector
Logpush Jobs	Add one or more Cloudflare Logpush jobs for the respective dataset

Adding Logpush Jobs

• Click the Add button to configure a new Cloudflare Logpush Job

Logpush Job Creation Fields

To create a Logpush job, provide the following details:

Field	Description
API Token	API Token used for authentication
Scope	Set to Account by default
Account ID	Your Cloudflare account ID
Dataset	The dataset you want to fetch logs from

Testing Connection

After entering all required details, click Next:

• If successful, a "SUCCESS" message will appear along with a timestamp
• If the test fails, an error message will be shown

Important Notes

• You are only limited to configure one Cloudflare connector
• If you need to collect multiple datasets, create multiple Logpush jobs within the same Cloudflare Logpush connector
• Store API tokens securely and rotate them regularly for enhanced security

Troubleshooting

For additional help, refer to:

• Troubleshooting Connector Validations
• Cloudflare Logpush API documentation
• Bloo platform support documentation

Security Considerations

• Use appropriate API token permissions (Edit for Logpush Jobs and Datasets)
• Store API tokens securely
• Regularly rotate API tokens
• Monitor API usage and rate limits