Unified Audit Logging System Now Generally Available

Cloudflare Audit Logs v2 is now available to all customers, providing a standardized approach to tracking user and system actions across the platform. Built on Cloudflare's API Shield and OpenAPI gateway, the system automatically generates logs without requiring manual instrumentation from individual product teams.

Key Capabilities

Product Coverage & Standardization

• Covers approximately 95% of Cloudflare products (up from 75% in v1)
• Consistent log format across all products, enabling easier searching and filtering
• Automatic instrumentation ensures uniform logging without per-team configuration

Advanced Filtering & Analysis

• Over 20 filter parameters available via API, including actor, action type, action result, resource, HTTP method, and zone
• Enhanced context in each log entry: authentication method, interface type (API or dashboard), Cloudflare Ray ID, and actor token details
• 18-month retention period for all logs
• Full audit history accessible via API and Logpush

Access Methods

• Dashboard: Navigate to Manage Account > Audit Logs
• API: GET https://api.cloudflare.com/client/v4/accounts/{account_id}/logs/audit
• Logpush: Use the audit_logs_v2 account-scoped dataset

Important Limitations & Future Plans

The initial GA release includes ~30 days of beta logs (retroactive to February 8, 2026), which will expire April 9, 2026. Logs generated after GA launch will receive the full 18-month retention. The dashboard query window is limited to 90 days for performance; use the API or Logpush for full history access.

Current exclusions: GET requests (view actions) and 4xx error responses are not logged at GA, though selective logging for sensitive read operations is planned. The ability to view before/after values during changes is a roadmap item; Audit Logs v1 remains available as an interim solution.

Audit Logs v1 will continue running in parallel, with a separate deprecation timeline to be communicated.