Skip to content

Commit 2234d8a

Browse files
ranbelsdnts
authored andcommitted
add logpush details (cloudflare#22795)
1 parent fddd1c4 commit 2234d8a

File tree

1 file changed

+17
-5
lines changed

1 file changed

+17
-5
lines changed

src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx

Lines changed: 17 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -91,13 +91,17 @@ To learn more about user connections, refer to the [Access for Infrastructure do
9191

9292
## SSH command logs
9393

94-
SSH command logs contain the actual SSH commands that a user ran on the target. These logs are encrypted using a public key provided by the customer and are not visible to Cloudflare.
94+
SSH command logs contain the actual SSH commands that a user ran on the target. Customers on all plans can store SSH logs on Cloudflare. These logs are encrypted using a public key provided by the customer and are not visible to Cloudflare. Additionally, Enterprise customers can configure a Logpush job to send SSH logs to storage destinations. Logpush payloads are not encrypted and do not require uploading a public key.
9595

96-
### Enable SSH command logging
96+
### Download encrypted SSH logs
97+
98+
Follow these instructions to encrypt and download SSH command logs from Zero Trust.
99+
100+
#### Enable SSH command logging
97101

98102
<Render file="ssh/upload-ssh-key" params={{ note: "" }} />
99103

100-
### Disable SSH command logging
104+
#### Disable SSH command logging
101105

102106
To turn off SSH command logging, delete your uploaded public key:
103107

@@ -128,7 +132,7 @@ curl --request PUT https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/gat
128132
</TabItem>
129133
</Tabs>
130134

131-
### View SSH logs
135+
#### View SSH logs
132136

133137
SSH command logs are not visible from the dashboard itself and must be exported and decrypted.
134138

@@ -139,7 +143,15 @@ To manually retrieve logs:
139143
3. Select **Download** to download the session's command log.
140144
4. <Render file="ssh/decrypt-ssh-log" />
141145

142-
Enterprise customers can also export command logs using [Logpush](/cloudflare-one/insights/logs/logpush/).
146+
### Export SSH logs with Logpush
147+
148+
:::note[Availability]
149+
Only available on Enterprise plans.
150+
:::
151+
152+
Cloudflare allows you to send SSH command logs to storage destinations configured in [Logpush](/logs/about/), including third-party destinations. For a list of available data fields, refer to the [SSH logs dataset](/logs/reference/log-fields/account/ssh_logs/).
153+
154+
To set up the Logpush job, refer to [Logpush integration](/cloudflare-one/insights/logs/logpush/).
143155

144156
## Known limitations
145157

0 commit comments

Comments
 (0)