Cloudflare

groundcover supports ingesting Cloudflare logs using the standard Cloudflare LogPush mechanism. This integration allows you to stream Cloudflare logs directly to groundcover for centralized log management and analysis.

Requirements

Get your InCloud site address

Find your inCloud site in your installation values.yaml:

global:
  ingress:
    site: {inCloud_Site}

Need help finding your site value? Contact us on Slack.

Create an ingestion key

To authenticate the Cloudflare requests, you need to use a Third Party ingestion key. You can create an ingestion key by following these steps:

1. Open Settings → Access → Ingestion Keys and click Create key.

2. Give the key a clear, descriptive Name (for example cloudflare-prod-logs).

3. Select the Type as Third Party.

4. Click Click & Copy Key and store it securely.

For more details on ingestion keys, see the Ingestion Keys documentation.

Configuring LogPush via The Dashboard

https://developers.cloudflare.com/logs/logpush/logpush-job/enable-destinations/http/#manage-via-the-cloudflare-dashboard

In the Cloudflare LogPush dashboard, select Create a logpush job and follow the steps below.

Destination type

Choose the HTTP Destination options

Endpoint URL

The endpoint URL consists of 3 parts:

• The groundcover endpoint - https://{incloud-site}/json/logs

• Mandatory headers - apikey and Content-Type

• Recommended headers - for extra tagging

Enrichment via Additional Headers

Use header_ notations in the endpoint URL to add headers to the request in order to provide authentication and tagging

The following headers will enrich the ingested data with identifiers that can be used in groundcover. It is highly recommended to use those to tag the data for better usability and querying speed.

Header Name	Value Example	Description
X-Groundcover-Service-Name	cloudflare-edge	The service or workload name
X-Groundcover-Env-Name	production	The environment name
X-Groundcover-Source	source	Source of the data

Full example

See below for a full endpoint URL using the recommended enrichments.

Replace {incloud-site} with your groundcover inCloud Managed site URL and {ingestion-key} with your Third Party ingestion key.

https://{incloud-site}/json/logs?header_apikey={ingestion-key}&header_Content-Type=application/x-ndjson&header_X-Groundcover-Service-Name=cloudflare-edge&X-Groundcover-Env-Name=production&X-Groundcover-Source=cloudflare