Documentation Center
AlienVault® USM Anywhere™

Configuring the AlienApp for Cloudflare

  Role Availability   Read-Only   Analyst   Manager

Cloudflare Enterprise customers have access to the Enterprise Log Share service, which is a REST API used to consume request logs over HTTP. This REST API includes a method for accessing a domain’s request logs using a client API key.

When the AlienApp for Cloudflare is enabled and connected to your Cloudflare Enterprise service, the predefined, scheduled job collects log data from Cloudflare every 20 minutes. After USM Anywhere collects and analyzes the first of these events, you can view them in the Events page.

Getting Your Cloudflare API Key

Before you can use the AlienApp for Cloudflare to collect and analyze Cloudflare log data within USM Anywhere, you must have an API key that can be used to connect to your Cloudflare service. Cloudflare issues an API key for a specific user account and all requests with that key act on behalf of that user.

To acquire the Cloudflare API key

  1. Go to https://support.cloudflare.com/hc/en-us/articles/200167836-Where-do-I-find-my-Cloudflare-API-key- and follow the vendor instructions to access the key.
  2. Copy the key value to your clipboard or a secure location.

Enabling the AlienApp for Cloudflare API Connection

After you have your Cloudflare API key value, you're ready to enable the AlienApp for Cloudflare in USM Anywhere.

  1. In USM Anywhere, go to DATA SOURCES > INTEGRATIONS.
  2. Click the AlienApps tab.

    Access the AlienApps page

  3. In the AlienApps page, click the Cloudflare tile.

    Click the Cloudflare tile

    The Status tab is displayed, but the status information indicates an unconfigured state.

  4. If you have more than one deployed USM Anywhere Sensor, select the sensor that you want to use for the enabled AlienApp.

    USM Anywhere AlienApps operate through a deployed sensor and use APIs to integrate with the connected third-party technology. Choose the sensor that can access the integration endpoint.

    Select a deployed sensor used to enable the AlienApp

  5. If the app is not already enabled, click Enable to activate the app for the sensor.
  6. Select the Settings tab.
  7. Enter the connection information to access the API for your Cloudflare service.

    • Email — Enter the email for the Cloudflare user account to use for API authentication.
    • Cloudflare API Key — Click Change Cloudflare API Key and enter the API key value associated with that user account.

    Select the Settings tab to enter the Cloudflare account email and API key

  8. Click Save.
  9. Select the Status tab to verify the connection.

    The icon indicates that there is a problem with the connection. The MESSAGE column provides information about the issue. If this is the case, repeat the steps to fix the configuration or troubleshoot your Cloudflare connection.