Integrating Network Analytics Logs with your SIEM dashboard
May 17, 2022Omer Yoachimik, Kyle Bowman

Summary
Introduces Network Analytics Logs for Magic Transit, Magic Firewall, and Spectrum customers on the Enterprise plan. These logs provide packet samples of traffic dropped and passed by specific mitigation systems, enabling near real-time visibility into network traffic and DDoS attacks. The post details how to set up Logpush jobs to feed these logs into SIEM systems like Splunk, including API token creation, Splunk HEC setup, and the Logpush job configuration. It also highlights the cost-saving benefits of storing logs in R2.
More from the Data Infrastructure & Analytics trail
- Introducing Cloudflare Basin: an open, serverless data platform, now generally available
- Introducing the Billable Usage API: programmatic cost visibility for Cloudflare
- Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402
- How we built Cloudflare's data platform and an AI agent on top of it
- Iran's Internet is partially restored, Cloudflare Radar data shows