Cloudflare Logpush
Job that continuously batches a Cloudflare log dataset to storage, a SIEM or a log provider.
- Provider
- cloudflare
- Kind
- Stream processor
- Category
- Messaging
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| checkpointIntervalSeconds | integer | — | no | — | inherited |
| exactlyOnce | boolean | — | no | false | inherited |
| instances | integer | — | no | — | inherited |
| lateDataPolicy | enum | drop | shift | sideline | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| maxUploadRecords | integer | — | no | 100000 | inherited |
| outputFormat | enum | ndjson | csv | no | ndjson | inherited |
| sampled | boolean | — | no | false | inherited |
| stateBackend | enum | memory | rocksdb | external | no | memory | inherited |
| timestampFormat | enum | unixnano | unix | rfc3339 | no | unixnano | inherited |
| watermarkSeconds | integer | — | no | — | inherited |
| windowing | enum | none | event-time | processing-time | no | none | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
windowed-aggregation-without-watermark
Event-time windows need a watermark to know when a window is complete. Without one the processor either waits forever or closes windows early and silently drops late events.
- — all of these hold:
- — the node's `windowing` is "event-time"
- — the node's `watermarkSeconds` has no value
nodes:
- { id: "logpush", component: "cloudflare-logpush" }Realtime Compute for Apache Flinkalibaba-flinkAmazon EventBridge Pipesaws-eventbridge-pipesAmazon Data Firehoseaws-firehoseAmazon Managed Service for Apache Flinkaws-managed-flinkAmazon OpenSearch Ingestionaws-opensearch-ingestionAzure Stream Analyticsazure-stream-analyticsCloudflare Pipelinescloudflare-pipelinesArroyoarroyoApache BeambeamBytewaxbytewaxDrasidrasiApache FlinkflinkKafka Streamskafka-streamsksqlDBksqldbLogstashlogstashMaterializematerializeApache NiFinifiNorikranorikraRedpanda Connectredpanda-connectRisingWaverisingwaveApache SamzasamzaSnowplowsnowplowSpark Structured Streamingspark-streamingApache StormstormGeneric stream processorstream-processorTremortremorGoogle Cloud Dataflowgoogle-dataflowManufacturing Data Enginegoogle-manufacturing-data-engineActivity Tracker Event Routingibm-activity-tracker-event-routingIBM Cloud Logs Routingibm-logs-routingIBM Cloud Metrics Routingibm-metrics-routingOCI Connector Huboci-connector-hubOCI GoldenGate Stream Analyticsoci-goldengate-stream-analytics
# yaml-language-server: $schema=../../schema/component.schema.json # Logpush job: continuously batches a Cloudflare dataset out to storage, a SIEM or a log provider. # "Log output options" gives ndjson as the default record format; the API configuration page gives # an unsampled default (sample 1), unixnano timestamps and 100,000 records per upload. schemaVersion: "1" type: "component" id: "cloudflare-logpush" kind: "stream-processor" provider: "cloudflare" docs: "https://developers.cloudflare.com/logs/logpush/logpush-job/api-configuration/" defaults: managed: true properties: outputFormat: type: "enum" values: ["ndjson", "csv"] default: "ndjson" timestampFormat: type: "enum" values: ["unixnano", "unix", "rfc3339"] default: "unixnano" sampled: type: "boolean" default: false maxUploadRecords: type: "integer" default: 100000