Create an ingest token
Flarehawk issues a token scoped to your organization and Cloudflare datasets.
Integration
Connect Cloudflare Logpush to Flarehawk.
Stream Cloudflare Logpush telemetry into Flarehawk so your team can detect threats, investigate incidents, and retain security evidence across edge, DNS, Zero Trust, audit, email, Workers, and network datasets.
Setup
The integration follows the Cloudflare Logpush model
Flarehawk provides the destination endpoint and token. Your team configures Logpush jobs for the datasets you want monitored.
Configure Logpush jobs
Send selected Cloudflare Logpush datasets to the Flarehawk ingest endpoint.
Choose dataset coverage
Start with edge security logs, then expand into DNS, Zero Trust, audit, email, Workers, and network datasets.
Normalize every event
Incoming datasets are mapped into Flarehawk's canonical event model for search and analysis.
Detect and investigate
Flarehawk applies detection rules, analysis tiers, and Vigil investigations based on your plan.
Retain and export evidence
Keep telemetry attached to incidents, exports, compliance reviews, and historical baselines.
Datasets
Cloudflare Logpush coverage
Flarehawk supports the Cloudflare datasets operators need for edge, Zero Trust, audit, network, email, Workers, and DEX investigations. Customers get the exact destination configuration during onboarding.
HTTP Requests
http_requests
WAF / Firewall Events
firewall_events
DNS Logs
dns_logs
Network Error Reports
nel_reports
Spectrum Events
spectrum_events
Page Shield Events
page_shield_events
Zaraz Events
zaraz_events
Audit Logs
audit_logs
Audit Logs v2
audit_logs_v2
Access Requests
access_requests
Gateway DNS
gateway_dns
Gateway HTTP
gateway_http
+18 more Cloudflare datasets
Coverage
What the integration enables
Cloudflare Logpush gives Flarehawk the evidence needed for detection, investigation, and long-term review.
Edge and application security
Use HTTP, WAF, Page Shield, Spectrum, Workers, and sinkhole telemetry for edge-facing investigations.
Zero Trust and identity
Use Access, Gateway, WARP, device posture, SSH, CASB, DLP, and Browser Isolation datasets for user and device context.
Network, audit, and email evidence
Use DNS, audit, Magic Transit, Magic WAN, network analytics, email security, and DEX telemetry for long-term review.