Skip to content

Commit 297b66f

Browse files
committed
add logpush details
1 parent aff42c8 commit 297b66f

File tree

1 file changed

+18
-5
lines changed

1 file changed

+18
-5
lines changed

src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx

Lines changed: 18 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -91,13 +91,17 @@ To learn more about user connections, refer to the [Access for Infrastructure do
9191

9292
## SSH command logs
9393

94-
SSH command logs contain the actual SSH commands that a user ran on the target. These logs are encrypted using a public key provided by the customer and are not visible to Cloudflare.
94+
SSH command logs contain the actual SSH commands that a user ran on the target. Customers on all plans can store SSH logs on Cloudflare. These logs are encrypted using a public key provided by the customer and are not visible to Cloudflare. Additionally, Enterprise customers can configure a Logpush job to send SSH logs to storage destinations. Logpush payloads are not encrypted and do not require uploading a public key.
9595

96-
### Enable SSH command logging
96+
### Download encrypted SSH logs
97+
98+
Follow these instructions to encrypt and download SSH command logs from Zero Trust.
99+
100+
#### Enable SSH command logging
97101

98102
<Render file="ssh/upload-ssh-key" params={{ note: "" }} />
99103

100-
### Disable SSH command logging
104+
#### Disable SSH command logging
101105

102106
To turn off SSH command logging, delete your uploaded public key:
103107

@@ -128,7 +132,7 @@ curl --request PUT https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/gat
128132
</TabItem>
129133
</Tabs>
130134

131-
### View SSH logs
135+
#### View SSH logs
132136

133137
SSH command logs are not visible from the dashboard itself and must be exported and decrypted.
134138

@@ -139,4 +143,13 @@ To manually retrieve logs:
139143
3. Select **Download** to download the session's command log.
140144
4. <Render file="ssh/decrypt-ssh-log" />
141145

142-
Enterprise customers can also export command logs using [Logpush](/cloudflare-one/insights/logs/logpush/).
146+
### Export SSH logs with Logpush
147+
148+
:::note[Availability]
149+
Only available on Enterprise plans.
150+
:::
151+
152+
Cloudflare allows you to send SSH command logs to storage destinations configured in [Logpush](/logs/about/), including third-party destinations. For a list of available data fields, refer to the [SSH logs dataset](/logs/reference/log-fields/account/ssh_logs/).
153+
154+
155+
To set up the Logpush job, refer to [Logpush integration](/cloudflare-one/insights/logs/logpush/).

0 commit comments

Comments
 (0)