Cloudflare Docs
Logs
Visit Logs on GitHub
Set theme to dark (⇧+D)

DNS Firewall Logs

The descriptions below detail the fields available for dns_firewall_logs.

FieldValueType
ClientResponseCodeInteger value of response code. For more information refer to Response code.int
ClusterIDThe ID of the cluster which handled this request.string
ColoCodeIATA airport code of data center that received the request.string
EDNSSubnetEDNS Client Subnet (IPv4 or IPv6). For more information refer to EDNS Client Subnet.string
EDNSSubnetLengthEDNS Client Subnet length. For more information refer to EDNS Client Subnet.int
QueryDOIndicates if the client is capable of handling a signed response (DNSSEC answer OK).bool
QueryNameName of the query that was sent.string
QueryRDIndicates if the client means a recursive query (Recursion Desired).bool
QuerySizeThe size of the query sent from the client in bytes.int
QueryTCPIndicates if the query from the client was made via TCP (if false, then UDP).bool
QueryTypeInteger value of query type. For more information refer to Query type.int
ResponseCachedWhether the response was cached or not.bool
ResponseCachedStaleWhether the response was cached stale. In other words, the TTL had expired and the upstream nameserver was not reachable.bool
SourceIPIP address of the client (IPv4 or IPv6).string
TimestampTimestamp at which the query occurred.int or string
UpstreamIPIP of the upstream nameserver (IPv4 or IPv6).string
UpstreamResponseCodeInteger value of response code from the upstream nameserver. For more information refer to Response code.int
UpstreamResponseTimeMsUpstream response time in milliseconds.int