Cloudflare Enterprise customers have access to the Enterprise Log Share service, which is a REST API used to consume request logs over HTTP. This REST API includes a method for accessing a domain’s request logs using a client API key.
When the AlienApp for Cloudflare is enabled and connected to your Cloudflare Enterprise service, the predefined, scheduled job collects log data from Cloudflare every 20 minutes. After USM Anywhere collects and analyzes the first of these events, you can view them in the Events page.
Getting Your Cloudflare API Key
Before you can use the AlienApp for Cloudflare to collect and analyze Cloudflare log data within USM Anywhere, you must have an API key that can be used to connect to your Cloudflare service. Cloudflare issues an API key for a specific user account and all requests with that key act on behalf of that user.
To acquire the Cloudflare API key
- Go to https://support.cloudflare.com/hc/en-us/articles/200167836-Where-do-I-find-my-Cloudflare-API-key- and follow the vendor instructions to access the key.
- Copy the key value to your clipboard or a secure location.
Enabling the AlienApp for Cloudflare API Connection
After you have your Cloudflare API key value, you're ready to enable the AlienApp for Cloudflare in USM Anywhere.
- In USM Anywhere, go to DATA SOURCES > INTEGRATIONS.
Click the AlienApps tab.
In the AlienApps page, click the Cloudflare tile.
The Status tab is displayed, but the status information indicates an unconfigured state.
If you have more than one deployed USM Anywhere Sensor, select the sensor that you want to use for the enabled AlienApp.
USM Anywhere AlienApps operate through a deployed sensor and use APIs to integrate with the connected third-party technology. Choose the sensor that can access the integration endpoint.
- If the app is not already enabled, click Enable to activate the app for the sensor.
- Select the Settings tab.
Enter the connection information to access the API for your Cloudflare service.
- Email — Enter the email for the Cloudflare user account to use for API authentication.
- Cloudflare API Key — Click Change Cloudflare API Key and enter the API key value associated with that user account.
- Click Save.
Select the Status tab to verify the connection.
The icon indicates that there is a problem with the connection. The MESSAGE column provides information about the issue. If this is the case, repeat the steps to fix the configuration or troubleshoot your Cloudflare connection.