What's New

Audit Logs v2 is now generally available to all Cloudflare customers. Built on Cloudflare's API Shield / OpenAPI gateway, the new system provides automated, standardized logging across the Cloudflare platform without requiring manual instrumentation from individual product teams.

Key Improvements

• Expanded Coverage: ~95% of Cloudflare products now included in audit logging, up from ~75% with v1
• Standardized Format: Consistent log structure across all products, enabling easier search, filtering, and investigation
• Granular Filtering: Over 20 filter parameters available via API—filter by actor, action type, result, resource, HTTP method, zone, and more
• Enhanced Context: Each log includes authentication method, interface (API or dashboard), Cloudflare Ray ID, and token details
• Long Retention: 18-month log retention with full history accessible via API or Logpush

Access Options

• Dashboard: Manage Account > Audit Logs (v2 shown by default)
• API: GET https://api.cloudflare.com/client/v4/accounts/{account_id}/logs/audit
• Logpush: Available via the audit_logs_v2 dataset

Important Notes

Data Availability: Approximately 30 days of logs from the Beta period (back to ~February 8, 2026) are available at GA and will expire on ~April 9, 2026. Logs generated post-GA receive the full 18-month retention. Older logs remain in v1.

Limitations: The dashboard UI is limited to 90-day queries for performance; use the API or Logpush for full 18-month access. GET requests and 4xx errors are not currently logged. Before/after change values—a highly requested feature—will be added in a future release.

Migration Path: Audit Logs v1 continues running in parallel, and a deprecation timeline will be communicated separately.