You can now track DoH user creation right in Cloudflare's audit logs!

Hey there, it's me! Today's a small but nice audit logging update for anyone running Cloudflare One!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to the Cloudflare Changelog, Cloudflare's admin activity logs now capture an event every time a DNS over HTTP (DoH) user is created.

The story so far

Admin activity logs already tracked a range of administrative actions across Cloudflare One, but DoH user creation wasn't part of that coverage until now. This update adds it to the list.

What changes

You can check these DoH user creation logs in three ways:

• From the Cloudflare One dashboard
• Via the Cloudflare API
• Exported through Logpush

Being able to trace who created a DoH user and when is a small but useful addition if you're a security team auditing DNS access management, or if you need comprehensive logging for compliance purposes.

Wrap-up

• Admin activity logs now capture DoH user creation events
• Viewable from the dashboard, the API, or Logpush
• Useful for teams auditing DNS access management or handling compliance requirements

If your team uses DoH in Cloudflare One, this is a good moment to double-check your log review workflow now that coverage has improved!