Logs
Review detailed logs for your Zero Trust organization.
- User logs
- Access audit logs
- Gateway activity logs
- Tunnel audit logs
- Posture logs
- Logpush integration
Cloudflare Zero Trust logs are stored for a varying period of time based on the service used and plan type:
| Free | Standard | Access | Gateway | Enterprise | |
|---|---|---|---|---|---|
| Admin logs | 18 months | 18 months | 18 months | 18 months | 18 months |
| Access logs | 24 hours | 30 days | 30 days | 24 hours | 180 days |
| DNS logs | 24 hours | 30 days | 24 hours | 30 days | 180 days1 |
| Network logs | 24 hours | 30 days | 24 hours | 30 days | 30 days |
| HTTP logs | 24 hours | 30 days | 24 hours | 30 days | 30 days |
| DEX logs | 7 days | 7 days | 7 days | 7 days | 7 days |
| Device posture logs | 30 days | 30 days | 30 days | 30 days | 30 days |
1 Enterprise users on per query plans cannot store DNS logs via Cloudflare. You can still export logs via Logpush. For more information, contact your account team.
Cloudflare Zero Trust can be used with the Data Localization Suite to ensure that data storage is restricted to a specific geographic region. For more information refer to Customer Metadata Boundary.
For more information on how we use this data, refer to our Privacy Policy ↗.