JA EN
shiichan

Turnstile events now flow straight into Logpush!

Cloudflare Changelog ★★ View Markdown
#cloudflare#security#devops

Hey everyone, it's Shiichan! Today I dug up a nice little treat for anyone who loves logs. Turnstile events can now be streamed straight into your logs.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Over on Cloudflare's Changelog, Cloudflare Logs got a brand-new Logpush dataset called Turnstile Events. Turnstile is that friendly verification widget that replaces the old "I'm not a robot" checkbox, and now each of its events can be pushed out through Logpush.

The story so far

Until now there wasn't a dedicated Logpush dataset that bundled up Turnstile's detailed events for you. So if you wanted to analyze them outside the dashboard, you had to get a little creative. Now it's a proper, first-class dataset.

What changes

You can send Turnstile events straight to your Logpush destination (R2, S3, your favorite SIEM, and more). Since you can see which country, which browser, and what outcome each event had, visualizing your bot defenses gets a whole lot easier.

Dive Deep

Here are the fields inside the Turnstile Events dataset:

ASN, Action, BrowserMajor, BrowserName, ClientIP,
CountryCode, EventType, Hostname, OSMajor, OSName,
Sitekey, Timestamp, UserAgent

Sitekey tells you which widget, Action and EventType describe the verification itself, ASN, CountryCode, and ClientIP cover where the request came from, and BrowserName and OSName reveal the client environment. For the exact definition of each field, check the Logpush datasets docs when you set things up.

Wrap-up

  • Cloudflare Logs added a new Turnstile Events dataset to Logpush
  • It can output 13 fields like ASN, Action, ClientIP, and Sitekey
  • Ship them straight to your Logpush destination to analyze bot defenses and traffic patterns in your own logging stack

If you use Turnstile and think "I really want to track those verification events in my logs!", this small but handy update is a perfect fit for your security and ops teams.

Related posts