Cloudflare

logs observenow can be used as a destination for cloudflare cdn and worker log monitoring using logpush cloudflare's logpush custom https endpoint feature allows you to stream logs directly to observenow logpush transmits logs in real time batches without minimum size requirements setup via https //dash cloudflare com in the cloudflare dashboard, navigate to analytics and logs > logpush > create a logpush job navigate to select a destination and choose http destination input the http endpoint using your observenow endpoint details, then click continue the format of the endpoint use will be https //\<endpoint>/api/v1/cloudflare/logs?header authorization=basic%20\<base64(username\ password)> choose which dataset you want to forward to the destination service configure your logpush job settings set the job name to observenow under if logs match , define filtering criteria to include or exclude specific events from your log stream you can additionally filter in the observenow console as well ( described below ) in send the following fields , decide whether to transmit all available log data to observenow or select specific fields only navigate to advanced options set timestamp field format to unixnano for proper time handling click submit to finalize your logpush job configuration additional filtering in the https //console opsverse io , in observenow configuration, under integrations you should see log ingestion settings click on configure to filter cloudflare logs matching different conditions eg filter out all access logs or only keep auth logs or logs containing specific words when filtering, you can use the priority to determine the priority of different filtering rules when processing logs metrics opsverse's https //docs opsverse io/install the opsverse agent#veqxm can be used to collect metrics from cloudflare for accessing cloudflare metrics, create a custom token in cloudflare withthe following permissions https //developers cloudflare com/analytics/graphql api/getting started/authentication/api token auth/ account account analytics\ read account account settings\ read account account rulesets\ read zone firewall services\ read and zone analytics\ read add the following yaml snippets to the agent's values yaml and run the agent based on these https //docs opsverse io/install the opsverse agent#veqxm cloudflare exporter enabled true env \ name cf api token value \<cf api token> \# optional configs \ name cf zones value zone1,zone2,zone3 \# alternatively, add the above configurations into a secret and use \# secretref \<secretname> additional environment variables can be configured https //github com/lablabs/cloudflare exporter/tree/master?tab=readme ov file#configuration these metrics can be visualized using https //grafana com/grafana/dashboards/13133 cloudflare grafana dashboard