Zero Trust logs
Review detailed logs for your Zero Trust organization.
- User logs
- Access audit logs
- Gateway activity logs
- Tunnel audit logs
- Posture logs
- Logpush integration
Log retention
Cloudflare Zero Trust logs are stored for a varying period of time based on the service used:
| Zero Trust plan | Admin logs | Access logs | DNS logs | Network logs | HTTP logs |
|---|---|---|---|---|---|
| Free | 24 hours | 24 hours | 24 hours | 24 hours | 24 hours |
| Standard | 30 days | 30 days | 30 days | 30 days | 30 days |
| Access | 30 days | 30 days | 24 hours | 24 hours | 24 hours |
| Gateway | 30 days | 24 hours | 30 days | 30 days | 30 days |
| Enterprise | 180 days | 180 days | 180 days1 | 30 days | 30 days |
1 Enterprise users on per query plans cannot store DNS logs via Cloudflare. You can still export logs via Logpush. For more information, contact your account team.
Customer Metadata Boundary
Cloudflare Zero Trust can be used with the Data Localization Suite to ensure that data storage is restricted to a specific geographic region. For more information refer to Customer Metadata Boundary.
Data privacy
For more information on how we use this data, refer to our Privacy Policy.