eCDN Logpush

eCDN Logpush delivers eCDN logs in batches to specified destinations. eCDN logs contain valuable information, such as the client IP address, the requested URL, the user agent string, and details about firewall events such as blocked requests, firewall rule triggers, and more.

When creating a Logpush job through eCDN Logpush, view the list of available fields for http_requests, firewall, and pageshield events. Also specify which log types to deliver, including HTTP requests and firewall events, and specify different destination types:

Create Logpush job for Amazon S3 bucket (Requires ownership verification step)
Create Logpush job for Google Cloud Storage (Requires ownership verification step)
Create Logpush job for Azure
Create Logpush job for Datadog
Create Logpush job for Splunk
Create Logpush job for HTTPS
Create Logpush job for Kinesis

Create Amazon S3 Bucket Logpush Job

Prerequisites

Enable log push for an Amazon S3 destination:

Create an S3 bucket. For details, see AWS S3 documentation.
In the Amazon S3 console, navigate to S3 > Bucket > Permissions > Bucket Policy, and edit and paste the policy, replacing the Resource value with your own bucket path. The AWS Principal is owned by the CDN provider and must not be changed.

1{ "Id": "PutObjPolicy", "Version": "2012-10-17", "Statement": [ { "Sid": "AllowObjectFromeCDNLogpush", "Action": [ "s3:PutObject" ], "Effect": "Allow", "Resource": "arn:aws:s3:::example-bucket/*", "Principal": { "AWS": [ "arn:aws:iam::391854517948:user/cloudflare-logpush" ] } } ] }

To avoid incomplete files and minimize storage costs, use the AbortIncompleteMultipartUpload action when setting up a rule for S3 multipart uploads with eCDN Logpush. For details, see Uploading and copying objects using multipart upload_.

Note

Create Amazon S3 Bucket Ownership Token

eCDN Logpush supports pushing eCDN logs directly to Amazon S3 through CDN-API Logpush API.

However, before you can create an eCDN Logpush job to directly push logs to an AWS S3 bucket, you must demonstrate ownership of the S3 bucket. You do this by writing the ownership token file to the bucket destination. You must also create a unique ownership challenge token for each destination path within the same bucket.

You can use the special string {DATE} in the destination path to separate logs into daily subdirectories. For example, s3://customer-bucket/logs/{DATE}?region=us-east-1\&sse=AES256. When the logs are stored, the name of the directory is replaced with the date in YYYYMMDD format, for example: 20230215.

Example request:

1curl "https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/ownership" --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "destinationPath": "s3://example-bucket/log?region=us-east-1" }

Example response:

{ "data": { "destinationPath": "s3://example-bucket/log?region=us-east-1", "fileName": "log/ownership-challenge-072fd6be.txt" } }

Create Logpush Job API Call for Amazon S3

Populate the `ownershipChallengeToken` based on the call made in the previous section. The destinationPath must be the same as the one specified while generating the ownership token. For details, see the Parameters, Optional Parameters and Limitations sections.

Example Logpush job API call:

1curl --location `https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs` --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "name": "ExampleLogPushJob", "destinationPath": "s3://example-bucket/log?region=us-east-1", "logType": "http_requests", "ownershipChallengeToken": "Put your ownership challenge token here", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ] }

Example API call response: 201 status code

1{"data": {"jobId": 213543,"name": "ExampleLogPushJob","logType": "http_requests","logFields": ["CacheCacheStatus","CacheResponseBytes","ClientRequestPath","ClientRequestBytes","ClientRequestHost", "ClientRequestUserAgent","EdgeResponseStatus","EdgeResponseBytes","EdgeStartTimestamp","EdgeTimeToFirstByteMs"],"destinationPath":"s3://example-bucket/log?region=us-east-1","enabled": false,"createdOn":"2023-04-18T17:18:43Z"}}

Create Google Cloud Storage (GCS) Logpush Job

Prerequisites

Enable log push for a GCS destination:

Create a GCS bucket.
Cloudflare uses Google Cloud Identity and Access Management (IAM) to gain access to your Google Cloud Storage bucket. The Cloudflare IAM service account needs admin permission for the bucket. Add the member logpush@cloudflare-data.iam.gserviceaccount.com with Storage Object Admin permission. This makes sure that Cloudflare can push the ownership verification and logs to the GCS bucket.

Create GCS Ownership Token

eCDN Logpush supports pushing eCDN logs directly to Google Cloud Storage (GCS) through the CDN Logpush API.

However, before you can create an eCDN Logpush job for pushing logs to a GCS bucket, you must demonstrate ownership of the GCS bucket. You do this by writing the ownership token file to the bucket destination. You must also create a unique ownership challenge token for each destination path within the same bucket.
You can use the special string {DATE} in the destination path to separate logs into daily subdirectories. For example gs://customer-bucket/logs/{DATE}. When the logs are stored, the name of the directory is replaced with the date in YYYYMMDD format, for example: 20230215.

Example request:`

1curl "https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/ownership" --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "destinationPath": "gs://cflogpushtest/http_requests/{DATE}" }

Example response:

{ "data": { "destinationPath": "gs://cflogpushtest/http_requests/20251008", "fileName": "http_requests/20251008/ownership-challenge-072fd6be.txt" } }

Create Logpush Job API Call for GCS

Populate the ownershipChallengeToken based on the call made in the previous section. The `destinationPath` must be the same as one specified while generating the ownership token. For details, see the Parameters, Optional Parameters and Limitations sections.

Example logpush job API call:

1curl --location `https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs` --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "name": "ExampleLogPushJob", "destinationPath": "gs://cflogpushtest/http_requests/{DATE}", "logType": "http_requests", "ownershipChallengeToken": "Put your ownership challenge token here", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ] }

Example API call response: 201 status code

1{"data": {"jobId": 213543,"name": "ExampleLogPushJob","logType": "http_requests","logFields": ["CacheCacheStatus","CacheResponseBytes","ClientRequestPath","ClientRequestBytes","ClientRequestHost", "ClientRequestUserAgent","EdgeResponseStatus","EdgeResponseBytes","EdgeStartTimestamp","EdgeTimeToFirstByteMs"],"destinationPath":"gs://cflogpushtest/http_requests/{DATE}","enabled": false,"createdOn":"2023-04-18T17:18:43Z"}}

Create Azure Logpush Job

Prerequisites

Enable log push for an Azure destination:

Create a Blob Storage container. For details, see instructions from Azure ↗.
Create a shared access signature (SAS) ↗ to secure and restrict access to your blob storage container.
Use Storage Explorer ↗ to navigate to your container and right click on the container to create a signature. Set the signature to expire at least five years from the current date and only provide write permission.
Provide the SAS URL as part of your destinationPath attribute.
Logpush stops pushing logs if your SAS token expires, which is why an expiration period of at least five years is needed.

Example destination configuration for Azure:

1“azure://cflogpushtest.blob.core.windows.net//cflogpush/{DATE}?sv=2024-11-04&ss=b&srt=o&sp=wactf&se=2030-09-23T22:27:16Z&st=2025-09-23T14:12:16Z&spr=https&sig=abcdefgh%3D”

Cloudflare makes a test call to push test data to the Azure destination specified. If successful, the logpush job is created. If not, the logpush job creation fails.

Create Logpush Job API call for Azure

The following example creates a logpush job with an Azure destination path. For details, see the Parameters, Optional Parameters and Limitations sections.

1curl --location `https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs` --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "name": "ExampleLogPushJob", "destinationPath": "azure://cflogpush.blob.core.windows.net//cflogpush/{DATE}?sv=2024-11-04&ss=b&srt=o&sp=wactf&se=2030-01-01T00:00:00Z&st=2025-01-01T00:00:00Z&spr=https&sig=abcdefghIJKLMNOP%3D", "logType": "http_requests", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ] }

Example API call response: 201 status code

1{"data": {"jobId": 213543,"name": "ExampleLogPushJob","logType": "http_requests","logFields": ["CacheCacheStatus","CacheResponseBytes","ClientRequestPath","ClientRequestBytes","ClientRequestHost", "ClientRequestUserAgent","EdgeResponseStatus","EdgeResponseBytes","EdgeStartTimestamp","EdgeTimeToFirstByteMs"],"destinationPath":"azure://cflogpush.blob.core.windows.net//cflogpush/{DATE}?sv=2024-11-04&ss=b&srt=o&sp=wactf&se=2030-01-01T00:00:00Z&st=2025-01-01T00:00:00Z&spr=https&sig=abcdefghIJKLMNOP%3D","enabled": false,"createdOn":"2023-04-18T17:18:43Z"}}

Create Datadog Logpush Job

Prerequisites

Enable log push for a Datadog destination:

Specify your destination configuration hostname as either http-intake.logs.datadoghq.com/v1/input or http-intake.logs.datadoghq.com/api/v2/logs
Retrieve the Datadog API Key using the Datadog documentation. This is a required field.
You can set the service, host name, Datadog ddsource field, and ddtags fields as URL parameters. While these parameters are optional, they can be useful for indexing or processing logs. For details, see the Logs section ↗ in Datadog’s documentation. Note that the values of these parameters can contain special characters, which should be URL encoded.

Example destination configuration for Datadog:

1"datadog://<DATADOG_ENDPOINT_URL>?header_DD-API-KEY=<DATADOG_API_KEY>&ddsource=cloudflare&service=<SERVICE>&host=<HOST>&ddtags=<TAGS>”

Cloudflare makes a test call to push test data to the specified Datadog destination configuration. If successful, the logpush job is created. If not, the logpush job creation fails.

Create Logpush Job API call for Datadog

This example creates a logpush job with a Datadog destination path. For details, see the Parameters, Optional Parameters and Limitations sections.

1curl --location `https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs` --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "name": "ExampleLogPushJob", "destinationPath": "datadog://<DATADOG_ENDPOINT_URL>?header_DD-API-KEY=<DATADOG_API_KEY>&ddsource=cloudflare&service=<SERVICE>&host=<HOST>&ddtags=<TAGS>", "logType": "http_requests", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ] }

Example API call response: 201 status code

1{"data": {"jobId": 213543,"name": "ExampleLogPushJob","logType": "http_requests","logFields": ["CacheCacheStatus","CacheResponseBytes","ClientRequestPath","ClientRequestBytes","ClientRequestHost", "ClientRequestUserAgent","EdgeResponseStatus","EdgeResponseBytes","EdgeStartTimestamp","EdgeTimeToFirstByteMs"],"destinationPath":"datadog://<DATADOG_ENDPOINT_URL>?header_DD-API-KEY=<DATADOG_API_KEY>&ddsource=cloudflare&service=<SERVICE>&host=<HOST>&ddtags=<TAGS>","enabled": false,"createdOn":"2023-04-18T17:18:43Z"}}

Create Splunk Logpush Job

Prerequisites

Configure a Splunk destination with these values:

<SPLUNK_ENDPOINT_URL>: The Splunk raw HTTP Event Collector URL with the port. For example: splunk.cf-analytics.com:8088/services/collector/raw.
- Cloudflare expects the Splunk endpoint to be /services/collector/raw while configuring and setting up the Logpush job.
<SOURCE_TYPE>: The Splunk source type, for example: cloudflare:json.
<SPLUNK_AUTH_TOKEN>: The Splunk authorization token that is URL-encoded, for example: Splunk%20e6d94e8c-5792-4ad1-be3c-29bcaee0197d.
- Make sure that you have enabled HEC in Splunk. For details, see Splunk Analytics Integrations.
- API requests fail with a 504 error if you add an incorrect URL. Typically, the Splunk Cloud endpoint URL includes text like http-inputs- before the hostname.
<SPLUNK_CHANNEL_ID>: A unique channel ID. This is a random GUID that you can generate by using:
- An online tool like the GUID generator ↗.
- The command line, for example: python \-c 'import uuid; print(uuid.uuid4())'.
<INSECURE_SKIP_VERIFY>: A boolean value. Cloudflare recommends setting this value to false, because setting this value to true is equivalent to using the -k option with curl as shown in Splunk examples and is not recommended unless HEC uses a self-signed certificate.

Example destination configuration for Splunk:

1"splunk://<SPLUNK_ENDPOINT_URL>?channel=<SPLUNK_CHANNEL_ID>&insecure-skip-verify=<INSECURE_SKIP_VERIFY>&sourcetype=<SOURCE_TYPE>&header_Authorization=<SPLUNK_AUTH_TOKEN>"

Cloudflare makes a test call to push test data to the endpoint specified. If successful, the logpush job is created. If not, the logpush job creation fails.

Create Logpush Job API call for Splunk

This example creates a logpush job with a Splunk destination path. For details, see the Parameters, Optional Parameters and Limitations sections.

1curl --location `https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs` --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "name": "ExampleLogPushJob", "destinationPath": "splunk://<SPLUNK_ENDPOINT_URL>?channel=<SPLUNK_CHANNEL_ID>&insecure-skip-verify=<INSECURE_SKIP_VERIFY>&sourcetype=<SOURCE_TYPE>&header_Authorization=<SPLUNK_AUTH_TOKEN>", "logType": "http_requests", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ] }

Example API call response: 201 status code

1{"data": {"jobId": 213543,"name": "ExampleLogPushJob","logType": "http_requests","logFields": ["CacheCacheStatus","CacheResponseBytes","ClientRequestPath","ClientRequestBytes","ClientRequestHost", "ClientRequestUserAgent","EdgeResponseStatus","EdgeResponseBytes","EdgeStartTimestamp","EdgeTimeToFirstByteMs"],"destinationPath":"splunk://<SPLUNK_ENDPOINT_URL>?channel=<SPLUNK_CHANNEL_ID>&insecure-skip-verify=<INSECURE_SKIP_VERIFY>&sourcetype=<SOURCE_TYPE>&header_Authorization=<SPLUNK_AUTH_TOKEN>","enabled": false,"createdOn":"2023-04-18T17:18:43Z"}}

Create HTTPS Logpush Job

Prerequisites

Configure the HTTPS destination:

Make sure that the file upload to validate the destination accepts a gzipped test.txt.gz file with compressed content {"content":"tests"}. Otherwise, it returns an error, for example: error validating destination: error writing object: error uploading.
Specify “header_*” URL parameters for setting request headers.
- The HTTPS endpoint cannot have custom URL parameters that conflict with any “header_*” URL parameters you have set.
- These parameters must be properly URL-encoded, for example: use “%20” for a whitespace. Otherwise, some special characters can be decoded incorrectly.
For destinationconf , specify URL parameters in addition to special “header*” parameters.
- Non URL-encoded special characters are encoded when uploaded.

Example destination configuration for HTTPS endpoint:

1https://logs.example.com?header_Authorization=Basic%20REDACTED&tags=host:salesforce.com,dataset:http_requests

Cloudflare makes a test call to push test data to the endpoint specified. If successful, the logpush job is created. If not, the logpush job creation fails.

Create Logpush Job API call for HTTPS Endpoint

This example creates a logpush job with an HTTPS destination endpoint. For details, see the Parameters, Optional Parameters and Limitations sections.

1curl --location `https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs` --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "name": "ExampleLogPushJob", "destinationPath": "https://logs.example.com?header_Authorization=Basic%20REDACTED&tags=host:salesforce.com,dataset:http_requests", "logType": "http_requests", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ] }

Example API call response: 201 status code

1{"data": {"jobId": 213543,"name": "ExampleLogPushJob","logType": "http_requests","logFields": ["CacheCacheStatus","CacheResponseBytes","ClientRequestPath","ClientRequestBytes","ClientRequestHost", "ClientRequestUserAgent","EdgeResponseStatus","EdgeResponseBytes","EdgeStartTimestamp","EdgeTimeToFirstByteMs"],"destinationPath":"https://logs.example.com?header_Authorization=Basic%20REDACTED&tags=host:salesforce.com,dataset:http_requests","enabled": false,"createdOn":"2023-04-18T17:18:43Z"}}

Create Kinesis Logpush Job

Prerequisites

Configure the Kinesis destination:

Create an IAM Role for Cloudflare Logpush to Assume with this trust relationship:

1{
2    "Version": "2012-10-17",
3    "Statement": [
4        {
5             "Effect": "Allow",
6             "Principal": {
7                 "AWS": [
8                     "arn:aws:iam::391854517948:user/cloudflare-logpush"
9                 ]
10             },
11             "Action": "sts:AssumeRole"
12        }
13    ]
14}

Make sure that the IAM role has permissions to perform the PutRecord action on your Kinesis stream.

Replace <AWS_REGION>, <YOUR_AWS_ACCOUNT_ID> and <STREAM_NAME> with your values:

1{
2    "Version": "2012-10-17",
3    "Statement": [
4        {
5             "Effect": "Allow",
6             "Action": "kinesis:PutRecord",
7             "Resource": "arn:aws:kinesis:<AWS_REGION>:<YOUR_AWS_ACCOUNT_ID>:stream/<STREAM_NAME">
8        }
9    ]
10}

(Optional) When using the STS Assume Role, include sts-external-id as a destination_conf parameter in your Logpush job’s requests. For details, see Securely Using External ID for Accessing AWS Accounts Owned by Others ↗ for more information.

Example destination configuration for setting up logpush to AWS Kinesis: kinesis://<STREAM_NAME>?region=<AWS_REGION>&sts-assume-role-arn=arn:aws:iam::<YOUR_AWS_ACCOUNT_ID>:role/<IAM_ROLE_NAME>

Create Logpush Job API call for Kinesis

This example creates a logpush job with Kinesis. For details, see the Parameters, Optional Parameters and Limitations sections.

1curl --location `https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs` --request 'POST' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json' \ --data-raw `{ "name": "ExampleLogPushJob", "destinationPath": "kinesis://<STREAM_NAME>?region=<AWS_REGION>&sts-assume-role-arn=arn:aws:iam::<YOUR_AWS_ACCOUNT_ID>:role/<IAM_ROLE_NAME>", "logType": "http_requests", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ] }

Example API call response: 201 status code

1{"data": {"jobId": 213543,"name": "ExampleLogPushJob","logType": "http_requests","logFields": ["CacheCacheStatus","CacheResponseBytes","ClientRequestPath","ClientRequestBytes","ClientRequestHost", "ClientRequestUserAgent","EdgeResponseStatus","EdgeResponseBytes","EdgeStartTimestamp","EdgeTimeToFirstByteMs"],"destinationPath":"kinesis://<STREAM_NAME>?region=<AWS_REGION>&sts-assume-role-arn=arn:aws:iam::<YOUR_AWS_ACCOUNT_ID>:role/<IAM_ROLE_NAME>","enabled": false,"createdOn":"2023-04-18T17:18:43Z"}}

Parameters

Name: Your site name, which can’t be changed after the job is created.
Destination Path: The destination path for receiving logs. The prerequisites information for each destination type describes how to get the destinationPath attribute.
Ownership Challenge Token: This attribute is required for AWS S3 and Google Cloud Storage destinations. It isn’t required for other destinations such as HTTPS, Datadog, Azure, Splunk, or Kinesis.
Log Type: The type of logs you want to receive in your S3 bucket. Currently, the available types are http_requests, firewall_events, and page_shield_events.
Log Fields: The available log fields, which vary depending on the type of logs. For details, see eCDN Logpush Log Fields.

Optional Parameters

Filter: Use filters to select specific types of events to include in your logs or remove events irrelevant to your analysis. By applying filters to your logs, focus on the most important data and avoid unnecessary noise.

For details, see eCDN Logpush Filter.

Limitations

You can create a maximum of two Logpush jobs per zone.

Enable Logpush Job

An eCDN Logpush Job isn’t enabled upon creation. You must enable the Logpush Job to start receiving logs. For additional details, see CDN Zones API Overview.

1curl "https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs/{jobId}" \ --request 'PUT' \ --header 'Authorization: Bearer {access_token}' \ --header 'Content-Type: application/json' \ --data-raw '{ "enabled": true }'

Example Request

1{ "enabled": true }

Successful Response

A successful response returns 200.

1{ "data": { "jobId": 213543, "name": "ExampleLogPushJob", "logType": "http_requests", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ], "destinationPath": "s3://example-bucket/log?region=us-east-1", "enabled": true, "createdOn": "2023-04-18T17:18:43Z" } }

eCDN Logpush Logs JSON Output Data

This example shows JSON log output from an eCDN Logpush job.

1{ "CacheCacheStatus": "dynamic", "CacheResponseBytes": 12191, "ClientRequestPath": "/404", "ClientRequestBytes": 2161, "ClientRequestHost": "edge01.sfcc-ecdn-test5.net", "ClientRequestUserAgent": "Fuzz Faster U Fool v1.5.0-dev", "EdgeResponseStatus": 410, "EdgeResponseBytes": 39065, "EdgeStartTimestamp": "2023-04-18T17:29:16Z", "EdgeTimeToFirstByteMs": 504, "ClientRequestSource":"eyeball" }

List Logpush Jobs

For details, see CDN Zones API Overview.

1curl "https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs" --request 'GET' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json'

A successful response returns 200.

1{ "data": [ { "jobId": 213543, "name": "ExampleLogPushJob", "logType": "http_requests", "logFields": [ "CacheCacheStatus", "CacheResponseBytes", "ClientRequestPath", "ClientRequestBytes", "ClientRequestHost", "ClientRequestUserAgent", "EdgeResponseStatus", "EdgeResponseBytes", "EdgeStartTimestamp", "EdgeTimeToFirstByteMs" ], "destinationPath": "s3://example-bucket/log?region=us-east-1", "enabled": true, "createdOn": "2023-04-18T17:18:43Z" } ] }

Delete Logpush Job

For details, see CDN Zones API Overview.

1curl "https://{shortCode}.api.commercecloud.salesforce.com/cdn/zones/v1/organizations/f_ecom_bcxj_prd/zones/{zoneId}/logpush/jobs/{jobId}" --request 'DELETE' \ --header 'Authorization: Bearer <access_token>' \ --header 'Content-Type: application/json'

A successful response returns 204.

eCDN Logpush FAQ

The Logpush job was accidentally turned off, and we missed some logs for a certain time period. Is there a way to retrieve those missed logs?
- No, eCDN Logpush pushes the logs into the S3 bucket as soon as they become available and isn’t able to backfill the missing logs.
Can I adjust how often logs are pushed?
- No, eCDN Logpush pushes the logs in batches to the destination specified at the earliest possible time.
I created an ownership token, but I don’t see the file in my S3 bucket.
- Check your S3 bucket policy for allowing eCDN Logpush to write a file to your bucket. Edit and paste the policy into S3 > Bucket > Permissions > Bucket Policy, replacing the Resource value as shown in the Enable eCDN Logpush to Amazon S3 section.