Hi, is there anyone who has an idea on how to log pull cf-threat-score using Rapid 7 via API.
It sure looks like Logpull is limited to the HTTP fields listed here:
https://developers.cloudflare.com/logs/reference/log-fields/zone/http_requests
I also don’t see threat score listed when I follow their instructions to get a list of available fields:
https://developers.cloudflare.com/logs/logpull/requesting-logs/#fields
I don’t even see it in Logpush, either.
Have you seen cf-threat-score listed in any of the logging documentation?
I suppose there’s an outside chance of adding it as a custom field:
https://developers.cloudflare.com/logs/reference/custom-fields/
Maybe another @MVP knows of a way.
1 Like