Email security user actions available via Logpush

You can now send user action logs for Email security to an endpoint of your choice with Cloudflare Logpush.

Filter logs matching specific criteria you have set or select from multiple fields you want to send. For all users, we will log the date and time, user ID, IP address, details about the message they accessed, and what actions they took.

When creating a new Logpush job, remember to select Audit logs as the dataset and filter by:

• Field: "ResourceType"
• Operator: "starts with"
• Value: "email_security".

For more information, refer to Enable user action logs.

This feature is available across all Email security packages:

• Enterprise
• Enterprise + PhishGuard