WAF Logs Data Download
Hi there, I've just got struck by a DDOS attack and I am trying to download the logs from WAF, however clicking Download Data shows "No data available for download". Is there a way in which I can get those logs downloaded?
10 Replies
Business and Enterprise can export: https://developers.cloudflare.com/waf/analytics/security-events/
Security Events · Cloudflare Web Application Firewall (WAF) docs
Security Events allows you to review mitigated requests and helps you tailor your security configurations.
You could export each event or use GraphQL to get analytics directly and convert
That won't be much help since there are over 1.4 million logged events but thank you :)
ahh ok, not even Enterprise could do that then, can only export summaries or 500 individual events max. Enterprise has logpush though to get streamed each event, which is what some companies do.
Pro or above do have proper analytics though which can be super helpful, can summarize and filter on specific properties like ASNs/Paths/etc
There's various guides on the community to help you stop a DDoS attack as well: https://community.cloudflare.com/t/mitigating-an-http-ddos-attack-manually-with-cloudflare/302366
Thank you so much :)
I'm trying to manually browse some logs, but they do not want to load past this point. Is this a problem with my configuration or something else?
graphql (which is what powers that all) has various rate limits and budgets. You could try opening up dev tools -> network tab (ctrl+shift+i) and looking for the
graphql request and why it's failing in the response. Sadly sometimes the dash fails to show those errors/limitsi need help!!!!!!!!!!!!!!!!!!!!!!!
how do i contact the service? for gunz game?
If you want the Cloudflare Support to help you, you need to open a new post and describe your issue. Somethink like "I need help!!" won't help because nobody knows which help you need.
what're u mean new post? actually this is first time i join the discord. and i need help for charging me for Gcoins without recieving them... so what do i do
Create your own post or use #general-discussions , don't hijack others.
This isn't the place you can get support for that eitherway. Cloudflare can't help with that. If you're here because Cloudflare shows up in the whois or something, Cloudflare is for the most part just a CDN which protects websites, not associated with the content behind them nor the host of them.