JA EN
shiichan

Cloudflare Audit Logs Now Show Full Resource History and Diffs

Cloudflare Changelog ★★ View Markdown
#cloudflare#security

Hey everyone, it's me, Shii-chan! I found a nice update from Cloudflare — audit logs just got even more useful!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to Cloudflare's Changelog, Audit Logs v2 now includes a new feature called Resource History. Opening any audit log entry lets you see the sequence of previous changes made to the same resource, plus a side-by-side diff of what actually changed between entries.

The story so far

Until now, audit logs simply recorded changes one entry at a time. If you wanted to trace how a resource's configuration looked before, you had to hunt down the related entries yourself and compare them manually. It worked, but it took real effort.

What changes

With Resource History, opening a single audit log entry gives you the full change history for that resource in one place. Pick an earlier entry, and you instantly get a diff against the current one, so tracking what changed and when becomes much easier. If your job involves security investigations or compliance work where you constantly need to reconstruct "who changed what, and why," this is a quiet but genuinely useful improvement.

Dive Deep

The best part: this feature runs entirely on the audit log entries you already have. There's no additional configuration, no backend recapture, and no change to how audit logs are generated. History is simply layered on top of the existing system, so it's ready to use right away.

Here's the flow in the dashboard:

  • Go to Manage Account > Audit Logs
  • Open any audit log entry
  • Select the History tab to see the full history for that resource
  • Select an earlier entry to see a side-by-side diff against the current one

If you'd rather use the API, there's a dedicated History endpoint:

GET https://api.cloudflare.com/client/v4/accounts/{account_id}/logs/audit/{id}/history

It's also available for organization-scoped audit logs at /organizations/{organization_id}/logs/audit/{id}/history.

Wrap-up

  • Audit Logs v2 gains a new Resource History feature
  • From any audit log entry, you can see the resource's past changes and diffs right in the dashboard
  • No extra configuration, no backend recapture, no change to how logs are generated
  • Also available through a history API endpoint, for both accounts and organizations

A quietly satisfying upgrade for anyone in security or compliance who spends time reconstructing configuration change history!

Related posts