From de6f2055f964bc9cb59e1d704f6e735573f5c69a Mon Sep 17 00:00:00 2001 From: warnessa <157661726+warnessa@users.noreply.github.com> Date: Thu, 6 Mar 2025 18:57:11 -0600 Subject: [PATCH 1/3] Update logging-options.mdx modifying forensic copies instructions --- .../data-loss-prevention/dlp-policies/logging-options.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx index 0beaa46bbe68dd0..17d98afac57385d 100644 --- a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx +++ b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx @@ -66,13 +66,13 @@ Gateway allows you to send copies of entire HTTP requests matched in DLP policie To set up the DLP Forensic Copy Logpush job: -1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Logs** > **Logpush**. Select **Add a Logpush job**. -2. Set up a [Logpush destination](/logs/get-started/enable-destinations/) with the DLP Forensic Copy Logpush job. +1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Logs** > **Logpush**. Select **Create a Logpush job**. +2. Select a [Logpush destination](/logs/get-started/enable-destinations/) then configure the job to use the **DLP Forensic Copies** dataset. 3. Return to Zero Trust and go to **Gateway** > **Firewall policies** > **HTTP**. 4. Edit an existing Allow or Block DLP policy, or [create a new policy](/cloudflare-one/policies/data-loss-prevention/dlp-policies/#2-create-a-dlp-policy). 5. In the policy builder, scroll down to **Configure policy settings** and turn on **Send copy to storage**. 6. Select a storage destination. Gateway will list any configured Logpush jobs or integrations that can receive HTTP requests. -7. Select **Save**. +7. Select **Save policy**. DLP will now send a copy of HTTP requests that match this policy to your Logpush destination. From eabe06ebd7bdccddbe50cd7943fce5f579eaeacd Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Fri, 7 Mar 2025 12:42:47 -0600 Subject: [PATCH 2/3] Minor fixes --- .../dlp-policies/logging-options.mdx | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx index 17d98afac57385d..9e08e80bbcac866 100644 --- a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx +++ b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx @@ -66,13 +66,16 @@ Gateway allows you to send copies of entire HTTP requests matched in DLP policie To set up the DLP Forensic Copy Logpush job: -1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Logs** > **Logpush**. Select **Create a Logpush job**. -2. Select a [Logpush destination](/logs/get-started/enable-destinations/) then configure the job to use the **DLP Forensic Copies** dataset. -3. Return to Zero Trust and go to **Gateway** > **Firewall policies** > **HTTP**. -4. Edit an existing Allow or Block DLP policy, or [create a new policy](/cloudflare-one/policies/data-loss-prevention/dlp-policies/#2-create-a-dlp-policy). -5. In the policy builder, scroll down to **Configure policy settings** and turn on **Send copy to storage**. -6. Select a storage destination. Gateway will list any configured Logpush jobs or integrations that can receive HTTP requests. -7. Select **Save policy**. +1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Logs** > **Logpush**. +2. If this is your first Logpush job, select **Add a Logpush job**. Otherwise, select **Go to logpush configurations**. +3. In Logpush, select **Create a Logpush job**. +4. Select a [Logpush destination](/logs/get-started/enable-destinations/). +5. In **Configure logpush job**, choose the _DLP forensic copies_ dataset. Select **Create Logpush job**. +6. Return to Zero Trust and go to **Gateway** > **Firewall policies** > **HTTP**. +7. Edit an existing Allow or Block DLP policy, or [create a new policy](/cloudflare-one/policies/data-loss-prevention/dlp-policies/#2-create-a-dlp-policy). +8. In the policy builder, scroll down to **Configure policy settings** and turn on **Send copy to storage**. +9. Select a storage destination. Gateway will list any configured Logpush jobs or integrations that can receive HTTP requests. +10. Select **Save policy**. DLP will now send a copy of HTTP requests that match this policy to your Logpush destination. From 4f98bb9f74530698d1fec68a3d578404d9c0c2cb Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Fri, 7 Mar 2025 12:49:48 -0600 Subject: [PATCH 3/3] Edit other logs instructions to match --- .../docs/cloudflare-one/insights/logs/logpush.mdx | 12 ++++++------ .../dlp-policies/logging-options.mdx | 2 +- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/src/content/docs/cloudflare-one/insights/logs/logpush.mdx b/src/content/docs/cloudflare-one/insights/logs/logpush.mdx index 273cf48119fc18d..d1f7be87072825e 100644 --- a/src/content/docs/cloudflare-one/insights/logs/logpush.mdx +++ b/src/content/docs/cloudflare-one/insights/logs/logpush.mdx @@ -17,15 +17,15 @@ With Cloudflare's [Logpush](/logs/about/) service, you can configure the automat Zero Trust does not support configuring [Cloudflare R2](/logs/get-started/enable-destinations/r2/) as a Logpush destination in the dashboard. To use R2 as a destination for Zero Trust logs, configure your Logpush jobs [with the API](/logs/get-started/enable-destinations/r2/#manage-via-api). ::: -To enable Logpush for Zero Trust logs: +To configure Logpush for Zero Trust logs: 1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Logs** > **Logpush**. -2. Select **Add Logpush job**. -3. Select **Create a Logpush job**. -4. In **Select a destination**, select the service you want to export your logs to. +2. If this is your first Logpush job, select **Add a Logpush job**. Otherwise, select **Go to logpush configurations**. +3. In Logpush, select **Create a Logpush job**. +4. Choose a [Logpush destination](/logs/get-started/enable-destinations/). 5. Follow the service-specific instructions to configure and validate your destination. -6. Choose the [**Zero Trust datasets**](#zero-trust-datasets) you would like to export. -7. Enter a **Job name**, any [filters](/logs/reference/filters/) you would like to add, and the data fields you want to include in the log. +6. Choose the [Zero Trust datasets](#zero-trust-datasets) to export. +7. Enter a **Job name**, any [filters](/logs/reference/filters/) you would like to add, and the data fields you want to include in the logs. 8. (Optional) In **Advanced settings**, choose the timestamp format you prefer and whether you want to enable log sampling. 9. Select **Submit**. diff --git a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx index 9e08e80bbcac866..710448bb57483bc 100644 --- a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx +++ b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/logging-options.mdx @@ -69,7 +69,7 @@ To set up the DLP Forensic Copy Logpush job: 1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Logs** > **Logpush**. 2. If this is your first Logpush job, select **Add a Logpush job**. Otherwise, select **Go to logpush configurations**. 3. In Logpush, select **Create a Logpush job**. -4. Select a [Logpush destination](/logs/get-started/enable-destinations/). +4. Choose a [Logpush destination](/logs/get-started/enable-destinations/). 5. In **Configure logpush job**, choose the _DLP forensic copies_ dataset. Select **Create Logpush job**. 6. Return to Zero Trust and go to **Gateway** > **Firewall policies** > **HTTP**. 7. Edit an existing Allow or Block DLP policy, or [create a new policy](/cloudflare-one/policies/data-loss-prevention/dlp-policies/#2-create-a-dlp-policy).