I understand that 524s are caused by 60 second timeouts which is expected. I am looking to troubleshoot when these errors are happening. Is there a log in CloudFlare when the errors happen? I look in my IIS logs on my web servers and I am not seeing these errors.
Web Traffic Analytics in your dashboard for Pro plans and higher will give you the when they occur when you filter by status code i.e.
you can use your mouse to highlight and drill down further the selected chart too
Then you can match them up with your origin logs to get more details like cf-ray and cf-request-id etc
That is what I do with custom origin Nginx logging
In my case by matching the web traffic analytics reported path/urls with 524 I filtered that in my Firewall events and my 524 errors are due to me having custom Cloudflare Firewall rule to challenge certain bad ASN non-human requests from downloading my download files
Thank you. This is very helpful.