Logpush 是一项服务,可将您的 Cloudflare 日志数据自动传输到您控制的存储目标(例如云存储桶或 SIEM)。
下表列出了支持启用了客户元数据边界 (CMB) 的区域或账户的 Logpush 数据集(日志数据类别)。
- 级别 (Level) — 此日志类型是按区域(账户上的单个域)还是按账户(跨所有域)收集。
- 遵循 CMB (Respects CMB) — 启用 CMB 是否会导致此数据集的日志仅存储在您选择的区域中。如果是 ✅,则日志被本地化。如果是 ✘,则此数据集不受 CMB 影响,可能会存储在您选择的区域之外。
- 在美国/欧盟 CMB 区域可用 (Available with US/EU CMB region) — 当 CMB 设置为美国或欧盟时,您是否可以接收此数据集。
| 数据集名称 (Dataset name) | 级别 (Level) | 遵循 CMB (Respects CMB) | 在美国 CMB 区域可用 (Available with US CMB region) | 在欧盟 CMB 区域可用 (Available with EU CMB region) |
|---|---|---|---|---|
| Access Requests | Account | ✅ | ✅ | ✅ |
| AI Gateway Events | Account | ✅ | ✅ | ✅ |
| Audit Logs | Account | ✘ | ✅ | ✘ |
| Browser Isolation User Actions | Account | ✅ | ✅ | ✅ |
| CASB Findings | Account | ✘ | ✅ | ✘ |
| Client-side security (formerly Page Shield) | Zone | ✅ | ✅ | ✅ |
| DEX Application Tests | Account | ✅ | ✘ | ✅ |
| DEX Device State Events | Account | ✅ | ✘ | ✅ |
| Device Posture Results | Account | ✘ | ✅ | ✘ |
| DLP Forensic Copies | Account | N/A1 | ✘ | ✘ |
| DNS Firewall logs | Account | ✅ | ✅ | ✅ |
| DNS logs | Zone | ✅ | ✅ | ✅ |
| Email security Alerts | Account | ✅ | ✅ | ✅ |
| Firewall events | Zone | ✅ | ✅ | ✅ |
| Gateway DNS | Account | ✅ | ✅ | ✅ |
| Gateway HTTP | Account | ✅ | ✅ | ✅ |
| Gateway Network | Account | ✅ | ✅ | ✅ |
| HTTP requests | Zone | ✅ | ✅ | ✅ |
| IPSec Logs | Account | ✅ | ✅ | ✅ |
| Magic IDS Detections | Account | ✅ | ✅ | ✅ |
| NEL reports | Zone | ✘ | ✅ | ✘ |
| Network Analytics Logs | Account | ✅ | ✅ | ✅ |
| Sinkhole Events | Account | ✅ | ✅ | ✅ |
| Spectrum events | Zone | ✅ | ✅ | ✅ |
| WARP Config Changes | Account | ✅ | ✘ | ✅ |
| WARP Toggle Changes | Account | ✅ | ✘ | ✅ |
| Workers Trace Events | Account | ✅ | ✅ | ✅ |
| Zaraz Events | Zone | ✅ | ✅ | ✅ |
| Zero Trust Sessions | Account | ✅ | ✅ | ✅ |
-
客户元数据边界在此情况下不适用,因为这些日志从处理位置直接发送到您配置的目标。 ↩