Turngate ingests audit logs from your Cloudflare account so you can investigate account- and zone-level activity alongside the rest of your SaaS audit data.
To set up the Cloudflare integration you need to be a Super Administrator on the Cloudflare account you want to connect. Audit logs are pulled at the account level, so a single Data Source will cover every zone in that account.
Log in to the Cloudflare dashboard and select the account you want to connect.
Give the token a descriptive name (e.g. Turngate Audit Log Reader) and grant the following permissions:
Account → Account Settings → Read
Account → Audit Logs → Read
Account → Access: Organizations, Identity Providers, and Groups → Read (only required if you use Cloudflare Access and want those events included)
You will also need your Account ID, which is shown on the right-hand sidebar of any zone's Overview page in the Cloudflare dashboard.
We recommend creating the token under a service account or shared admin identity rather than a personal login so that audit collection isn't interrupted if an individual leaves your organization.
Once you have your API token and Account ID, head back to the Turngate App.
Turngate will validate the credentials and begin pulling audit logs. Up to 30 days of historical logs will be backfilled where available.
Account Settings — Read
Audit Logs — Read
Access: Organizations, Identity Providers, and Groups — Read (optional, only if Cloudflare Access events are desired)
Last updated