Cf.threat_score - will requests blocked by a rule appear in CF log?

I set up a Firewall rule something like this:
cf.threat_score > 10 and cf.threat_score <= 50 then Challenge
cf.threat_score > 50 then Block

To test the rule I will will be using Log.

Could not find anything that would show me what this would look like in the Log if the rule is tripped.

Does anyone now what I should expect to see?

-arb

The visitor sees this:

I presume you mean the Cloudflare Firewall Events Log?

In which case, you should see:


Edit: Restored my post for reference, but possibly different, sorry @alan.bell, didn’t realise it was an Enterprise setup!

Enterprise account?

1 Like

Yes, Enterprise

Ahh, one of the rare Unicorns 'round here :smile:

Peasants like us are not allowed to indulge in logging :smile: so I guess most wont exactly know what to expect, however I’d assume it should be similar to an actual entry when a request is e.g. block, such as posted by @domjh. Your account manager should be able to answer this in detail :man_shrugging:t2:

2 Likes

Also tagging @cscharff!

This topic was automatically closed after 30 days. New replies are no longer allowed.