Skip to main content

How to integrate Cloudflare

In this guide we'll walk you through how to configure Cloudflare to ship logs to the Defense.com SIEM platform.

Alan Butcher avatar
Written by Alan Butcher
Updated over a week ago

This integration is available on our Advanced and Enterprise packages.

Creating a Cloudflare API token

  1. Log in to your Cloudflare dashboard

  2. Click on your profile icon in the top right corner and select My Profile

  3. On the My Profile page, click on API Tokens and then select Create Token

  4. Scroll down and choose Create Custom Token

  5. In the Token Name field enter a descriptive name for the token

    Setting Permissions

  6. Select Account, then Access: Audit Logs, and choose Read

  7. Click Add more and select Account then Account Settings, and choose Read

    Selecting Account Resources

  8. Choose Include and select either All accounts or specify a particular account

    Adding Client IP Address Filtering

  9. Enter the following IP ranges:

    31.28.93.0/24

    31.28.77.166/32

    Setting the API Token expiration date

  10. Set the token's expiration in the TTL section

  11. Click Continue to summary, then Create Token to generate your API token

  12. After creation, copy and securely store your API token, as it will not be shown again

Finding your Cloudflare account ID

  1. Log in to the Cloudflare dashboard

  2. Your Account ID is displayed on the Overview page under the API section

Completing the integration

Once the steps outlined above have been completed, please reach out to our Technical Support team, providing the following information.

  • API token

  • Cloudflare Account ID

Our team will then complete the integration.

And that's it! You've successfully integrated Cloudflare🎉

Did this answer your question?