Cloudflare Docs
Logs
Logs
Edit this page
Give us feedback
Set theme to dark (⇧+D)

DNS Firewall Logs

The descriptions below detail the fields available for dns_firewall_logs.

​​ ClientResponseCode

Type: int

Integer value of the response code Cloudflare presents to the client. Response code follows IANA parameters.

​​ ClusterID

Type: string

The ID of the cluster which handled this request.

​​ ColoCode

Type: string

IATA airport code of data center that received the request.

​​ EDNSSubnet

Type: string

IPv4 or IPv6 address information corresponding to the EDNS Client Subnet (ECS) forwarded by recursive resolvers. Not all resolvers send this information.

​​ EDNSSubnetLength

Type: int

Size of the EDNS Client Subnet (ECS) in bits. For example, if the last octet of an IPv4 address is omitted (192.0.2.x.), the subnet length will be 24.

​​ QueryDO

Type: bool

Indicates if the client is capable of handling a signed response (DNSSEC answer OK).

​​ QueryName

Type: string

Name of the query that was sent.

​​ QueryRD

Type: bool

Indicates if the client means a recursive query (Recursion Desired).

​​ QuerySize

Type: int

The size of the query sent from the client in bytes.

​​ QueryTCP

Type: bool

Indicates if the query from the client was made via TCP (if false, then UDP).

​​ QueryType

Type: int

Integer value of query type. For more information refer to Query type.

​​ ResponseCached

Type: bool

Whether the response was cached or not.

​​ ResponseCachedStale

Type: bool

Whether the response was cached stale. In other words, the TTL had expired and the upstream nameserver was not reachable.

​​ ResponseReason

Type: string

Short descriptions with more context around the final DNS Firewall response. Refer to response reasons for more information.

​​ SourceIP

Type: string

IP address of the client (IPv4 or IPv6).

​​ Timestamp

Type: int or string

Timestamp at which the query occurred.

​​ UpstreamIP

Type: string

IP of the upstream nameserver (IPv4 or IPv6).

​​ UpstreamResponseCode

Type: int

Integer value of the response code from the upstream nameserver. Response code follows IANA parameters

​​ UpstreamResponseTimeMs

Type: int

Upstream response time in milliseconds.