Access Audit Logs

Hi,

I see the Access logs list Blocked login attempts, but we also require logs for successful logins, which are not showing up. One of the reasons we setup Access is because the marketing page says:

Audit logins, and everything else

Log and review every event.

  • Generate logs for logins, access requests and policy changes across all of your internal applications, all in one place

Am I missing a configuration or something?

Thanks,
Raphaël

Logs are at dash.teams.cloudflare.com

Check down the left side.

Or pull them from the API: https://api.cloudflare.com/#access-requests-access-requests-audit

Sorry @sdayman, obviously my first sentence was poorly worded.

What I meant by:

I see the Access logs list Blocked login attempts, but we also require logs for successful logins, which are not showing up.

Is that when I go to the CloudFlare for Teams dashboard (http://dash.teams.cloudflare.com/ as you pointed out) and then click on Logs and then Access, I only see blocked login attempts. I know for a fact that since I set it up, I have been blocked, and I have been permitted through, but the only thing in the list is the blocked attempt:

I also need to be able to audit successful logins through Access.

I have not experimented with those logs (until you posted). As it turns out, mine only displays Allows. I don’t use Access often because I have a Bypass policy for my home IP address, and I’ve yet to take advantage of all the free users recently introduced.

Looks like there may just have been a longer delay than I was expecting for the data to show up.

I’m now seeing both successful and blocked attempts:

1 Like