Sup CF community,
I enable logpush, and the documentation is not very clear about if Logpush is for realtime or in what time frame send logs, I need to get the logs from 1 week before for traffic analysis for a third party auditory, should I use logpush or logpull? Any tip to speed up logpull? Thanks in advance for any help or point me in the right direction.
Logpush will push new logs to a location, it cannot pull historic logs.
Logpull needs Log Retention enabled, it cannot pull logs if you don’t have that enabled.
Cloudflare cannot and does not store all HTTP request logs for all customers. So, if a customer does opt-in, it’s usually gonna be sending to their own storage (like Logpush) or for a short period of time (like Log Retention)
This means you’re probably out of luck if you don’t have any origin logs. I’d recommend enabling Logpush though for future use.
Hi @WalshyMVP
Thanks for your reply, we already enable log retention, and Logpush through a S3 bucket, We open a SR with CF for the historic logs and they recommend use the API for polling, our devops work in an automation so the pull would not represent a big effort.
Also I find a script in a public github that helps to pull the logs and store then in a local storage, is only compatible with any Linux distro, I already review the code and looks fine and secure, I am sharing this information here for anyone who can help.
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.