You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx
+17-5Lines changed: 17 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -91,13 +91,17 @@ To learn more about user connections, refer to the [Access for Infrastructure do
91
91
92
92
## SSH command logs
93
93
94
-
SSH command logs contain the actual SSH commands that a user ran on the target. These logs are encrypted using a public key provided by the customer and are not visible to Cloudflare.
94
+
SSH command logs contain the actual SSH commands that a user ran on the target. Customers on all plans can store SSH logs on Cloudflare. These logs are encrypted using a public key provided by the customer and are not visible to Cloudflare. Additionally, Enterprise customers can configure a Logpush job to send SSH logs to storage destinations. Logpush payloads are not encrypted and do not require uploading a public key.
95
95
96
-
### Enable SSH command logging
96
+
### Download encrypted SSH logs
97
+
98
+
Follow these instructions to encrypt and download SSH command logs from Zero Trust.
To turn off SSH command logging, delete your uploaded public key:
103
107
@@ -128,7 +132,7 @@ curl --request PUT https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/gat
128
132
</TabItem>
129
133
</Tabs>
130
134
131
-
### View SSH logs
135
+
####View SSH logs
132
136
133
137
SSH command logs are not visible from the dashboard itself and must be exported and decrypted.
134
138
@@ -139,7 +143,15 @@ To manually retrieve logs:
139
143
3. Select **Download** to download the session's command log.
140
144
4. <Renderfile="ssh/decrypt-ssh-log" />
141
145
142
-
Enterprise customers can also export command logs using [Logpush](/cloudflare-one/insights/logs/logpush/).
146
+
### Export SSH logs with Logpush
147
+
148
+
:::note[Availability]
149
+
Only available on Enterprise plans.
150
+
:::
151
+
152
+
Cloudflare allows you to send SSH command logs to storage destinations configured in [Logpush](/logs/about/), including third-party destinations. For a list of available data fields, refer to the [SSH logs dataset](/logs/reference/log-fields/account/ssh_logs/).
153
+
154
+
To set up the Logpush job, refer to [Logpush integration](/cloudflare-one/insights/logs/logpush/).
0 commit comments