Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions src/content/changelog/logs/2026-06-01-log-fields-updated.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
---
title: New Turnstile Events Logpush dataset in Cloudflare Logs
description: The Turnstile Events Logpush dataset is now available in Cloudflare Logs.
date: 2026-06-01
---

Cloudflare has updated [Logpush datasets](/logs/logpush/logpush-job/datasets/):

### New datasets

- **Turnstile Events**: A new dataset with fields including `ASN`, `Action`, `BrowserMajor`, `BrowserName`, `ClientIP`, `CountryCode`, `EventType`, `Hostname`, `OSMajor`, `OSName`, `Sitekey`, `Timestamp`, and `UserAgent`.

For the complete field definitions for each dataset, refer to [Logpush datasets](/logs/logpush/logpush-job/datasets/).
Original file line number Diff line number Diff line change
@@ -0,0 +1,88 @@
---
# Code generator. DO NOT EDIT.

title: Turnstile Events
pcx_content_type: configuration
sidebar:
order: 21
---

The descriptions below detail the fields available for `turnstile_events`.

## ASN

Type: `int`

The visitor's autonomous system number (ASN).

## Action

Type: `string`

The Turnstile widget action string configured by the customer.

## BrowserMajor

Type: `int`

The major version of the visitor's browser.

## BrowserName

Type: `string`

The name of the visitor's browser (for example, 'Chrome', 'Firefox').

## ClientIP

Type: `string`

IP address of the visitor.

## CountryCode

Type: `string`

The 2-letter ISO-3166 country code of the visitor.

## EventType

Type: `string`

The type of Turnstile event. Possible values are <em>challenge_issued</em> \| <em>challenge_non_interactive_solved</em> \| <em>challenge_interactive_solved</em> \| <em>challenge_non_interactive_siteverify_solved</em> \| <em>challenge_interactive_siteverify_solved</em> \| <em>challenge_clearance_siteverify_solved</em> \| <em>challenge_siteverify_failed_double_redemption</em> \| <em>challenge_siteverify_failed_invalid_token</em> \| <em>challenge_siteverify_failed_other</em> \| <em>challenge_siteverify_ratelimited</em>.

## Hostname

Type: `string`

The hostname where the Turnstile widget was loaded.

## OSMajor

Type: `int`

The major version of the visitor's operating system.

## OSName

Type: `string`

The name of the visitor's operating system (for example, 'Windows', 'macOS').

## Sitekey

Type: `string`

The Turnstile sitekey (widget identifier).

## Timestamp

Type: `int or string`

The date and time the event was logged.

## UserAgent

Type: `string`

The visitor's full user agent string.
Original file line number Diff line number Diff line change
Expand Up @@ -457,7 +457,7 @@ Result of the check for [leaked credentials](/waf/detections/leaked-credentials/

Type: `array[object]`

Array of matched Cloudflare Rules product rules grouped by product. Each object contains: <em>product</em> (string, e.g. snippets, transform, redirects), <em>rulesetId</em> (string), <em>rulesetVersion</em> (int), and <em>rules</em> (array of objects, each with <em>id</em> (string) and optional <em>metadata</em> (object with string key-value pairs)).
Array of matched Cloudflare Rules product rules grouped by product. Each object contains: <em>product</em> (string, for example snippets, transform, redirects), <em>rulesetId</em> (string), <em>rulesetVersion</em> (int), and <em>rules</em> (array of objects, each with <em>id</em> (string) and optional <em>metadata</em> (object with string key-value pairs)).

## OriginDNSResponseTimeMs

Expand Down
Loading