Datasets (2)
Last updated Oct 15, 2026 Cloudflare Observability supports logs from the products listed in the table. Turn on each dataset in the location shown under Enablement. Log Explorer (Legacy) datasets appear in Logs once your account has the Log Explorer add-on and the dataset is turned on. Event sizes are estimates and vary by record.
You can also query sampled analytics datasets for your zones in Logs without turning anything on.
Supported datasets
| Dataset | Identifier | Enablement | Average event size | Default retention |
|---|---|---|---|---|
| Workers | workers |
On Worker | 4.84 KB | 7 days |
| Containers | containers |
On Worker | 1.88 KB | 7 days |
| R2 Data Access Logs | r2 |
On Bucket | 1.55 KB | 7 days |
| AI Gateway | ai-gateway |
On Gateway | 2 KB | 7 days |
| Issues | real-time-issues |
On Worker | 2.64 KB | 7 days |
| HTTP Requests | http_requests |
On Account | 1.56 KB | 30 days |
| Firewall Events | firewall_events |
On Account | 1.36 KB | 30 days |
| Access Requests | access_requests |
On Account | 446 B | 30 days |
| Audit Logs | audit_logs |
On Account | 2.69 KB | 30 days |
| Audit Logs v2 | audit_logs_v2 |
On Account | 1.73 KB | 30 days |
| Browser Isolation User Actions | biso_user_actions |
On Account | Not published | 30 days |
| CASB Findings | casb_findings |
On Account | 2.67 KB | 30 days |
| DEX Application Tests | dex_application_tests |
On Account | 3.29 KB | 30 days |
| DEX Device State Events | dex_device_state_events |
On Account | 1.98 KB | 30 days |
| Device Posture Results | device_posture_results |
On Account | 730 B | 30 days |
| DNS Firewall Logs | dns_firewall_logs |
On Account | 387 B | 30 days |
| DNS Logs | dns_logs |
On Account | 199 B | 30 days |
| Email Security Alerts | email_security_alerts |
On Account | 6.74 KB | 30 days |
| Gateway DNS | gateway_dns |
On Account | 1.44 KB | 30 days |
| Gateway HTTP | gateway_http |
On Account | 1.47 KB | 30 days |
| Gateway Network | gateway_network |
On Account | 877 B | 30 days |
| IPsec Logs | ipsec_logs |
On Account | 207 B | 30 days |
| Magic BGP Logs | magic_bgp_logs |
On Account | Not published | 30 days |
| Magic IDS Detections | magic_ids_detections |
On Account | 334 B | 30 days |
| NEL Reports | nel_reports |
On Account | 204 B | 30 days |
| Network Analytics | network_analytics_logs |
On Account | 1.31 KB | 30 days |
| Page Shield Events | page_shield_events |
On Account | 443 B | 30 days |
| Sinkhole HTTP Logs | sinkhole_http_logs |
On Account | 705 B | 30 days |
| Spectrum Events | spectrum_events |
On Account | 685 B | 30 days |
| WARP Toggle Changes | warp_toggle_changes |
On Account | 327 B | 30 days |
| Zaraz Events | zaraz_events |
On Account | 7.30 KB | 30 days |
| Zero Trust Network Session Logs | zero_trust_network_sessions |
On Account | 1.21 KB | 30 days |
Sampled analytics datasets
Logs also lists HTTP requests and firewall events from the GraphQL Analytics API. These datasets need no enablement and have no additional charge. The following sampled analytics datasets are available:
| Dataset | GraphQL dataset | Availability | Retention |
|---|---|---|---|
| HTTP requests | httpRequestsAdaptive |
All plans | At least 31 days |
| Firewall events | firewallEventsAdaptive |
Pro, Business, and Enterprise | At least 31 days |
These datasets use adaptive sampling. Results can omit individual events, and counts can be estimates. Available fields, exact retention, and how far back charts reach depend on your plan. Refer to GraphQL Analytics API limits for details.
To query these datasets for a zone, you need the Zone Analytics Read permission for that zone. Account administrators can grant it on the Members page.
For unsampled HTTP requests and firewall events, turn them on in Log Explorer. They need the paid Log Explorer add-on. Refer to Pricing for the Log Explorer price.
Pricing
Beginning December 1, 2026, all Cloudflare logs and traces will use the same pricing model. Log Explorer datasets have a different price point of $1 per GB ingested and include 30-day retention. Queries, dashboards, alerts, and analytics do not incur additional charge.
Included in the new Observability pricing
The following logs and traces share account-level ingestion and storage allowances:
- Cloudflare Traces
- Workers Logs
- Workers Traces
- Containers logs
- R2 Data Access Logs
- AI Gateway logs
- Issues
Was this helpful?
YesNo
On this page
{"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/observability/logs/datasets/#page","headline":"Datasets","description":"Review scope, size, and retention for supported Logs datasets.","url":"https://developers.cloudflare.com/observability/logs/datasets/","inLanguage":"en","image":"https://developers.cloudflare.com/observability/logs/datasets/og.png?v=d09fd91e35ee57db","dateModified":"2026-10-15","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
description: Store and explore Cloudflare logs in the dashboard. title: Log Explorer (Legacy) image: https://developers.cloudflare.com/observability/logs/log-explorer/og.png?v=7bb59558ed9b4b08
Documentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/observability/llms.txt
Use this file to discover all available pages before exploring further.
Docs