Cloudflare Docs
Logs
Logs
Visit Logs on GitHub
Set theme to dark (⇧+D)

DNS Firewall Logs

The descriptions below detail the fields available for dns_firewall_logs.

Field Value Type
ClientResponseCode Integer value of response code. For more information refer to Response code. int
ClusterID The ID of the cluster which handled this request. string
ColoCode IATA airport code of data center that received the request. string
EDNSSubnet EDNS Client Subnet (IPv4 or IPv6). For more information refer to EDNS Client Subnet. string
EDNSSubnetLength EDNS Client Subnet length. For more information refer to EDNS Client Subnet. int
QueryDO Indicates if the client is capable of handling a signed response (DNSSEC answer OK). bool
QueryName Name of the query that was sent. string
QueryRD Indicates if the client means a recursive query (Recursion Desired). bool
QuerySize The size of the query sent from the client in bytes. int
QueryTCP Indicates if the query from the client was made via TCP (if false, then UDP). bool
QueryType Integer value of query type. For more information refer to Query type. int
ResponseCached Whether the response was cached or not. bool
ResponseCachedStale Whether the response was cached stale. In other words, the TTL had expired and the upstream nameserver was not reachable. bool
SourceIP IP address of the client (IPv4 or IPv6). string
Timestamp Timestamp at which the query occurred. int or string
UpstreamIP IP of the upstream nameserver (IPv4 or IPv6). string
UpstreamResponseCode Integer value of response code from the upstream nameserver. For more information refer to Response code. int
UpstreamResponseTimeMs Upstream response time in milliseconds. int