Skip to content

[Logs] Update Logpush dataset field definitions (2026-04-16)#29955

Closed
soheiokamoto wants to merge 1 commit into
productionfrom
sync/log-fields-2026-04-16-103401
Closed

[Logs] Update Logpush dataset field definitions (2026-04-16)#29955
soheiokamoto wants to merge 1 commit into
productionfrom
sync/log-fields-2026-04-16-103401

Conversation

@soheiokamoto
Copy link
Copy Markdown
Contributor

Summary

Automated sync of Logpush dataset field definitions from data/entities.

New datasets

  • Email Security Post-Delivery Events: A new dataset with fields including AlertID, CompletedAt, Destination, FinalDisposition, Folder, From, FromName, MessageID, MessageTimestamp, MicrosoftTenantID, Operation, PostfixID, Reasons, Recipient, RequestedAt, RequestedBy, RequestedDisposition, Status, Subject, Success, and To.

Updated fields in existing datasets

  • Firewall events (added): AISecurityInjectionScore, AISecurityPIICategories, AISecurityTokenCount, and AISecurityUnsafeTopicCategories.
  • HTTP requests (added): AISecurityInjectionScore, AISecurityPIICategories, AISecurityTokenCount, and AISecurityUnsafeTopicCategories.

Files changed

  • src/content/docs/logs/logpush/logpush-job/datasets/{account,zone}/ — dataset pages
  • src/content/changelog/logs/2026-04-16-log-fields-updated.mdx — changelog

Documentation checklist

  • Changelog entry added
  • Content generated by code generator (DO NOT EDIT manually)

@soheiokamoto soheiokamoto requested a review from a team as a code owner April 16, 2026 10:34
@soheiokamoto soheiokamoto requested a review from a team April 16, 2026 10:34
@soheiokamoto soheiokamoto requested a review from rianvdm as a code owner April 16, 2026 10:34
@github-actions
Copy link
Copy Markdown
Contributor

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern Owners
/src/content/changelog/ @cloudflare/pm-changelogs, @cloudflare/pcx-technical-writing, @cloudflare/product-owners
/src/content/docs/logs/ @soheiokamoto, @angelampcosta, @rianvdm, @cloudflare/pcx-technical-writing, @cloudflare/product-owners

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 1, 2026

Hey there, we've marked this pull request as stale because there's no recent activity on it. This label helps us identify PRs that might need updates (or to be closed out by our team if no longer relevant).

@github-actions github-actions Bot added the stale label May 1, 2026
@pedrosousa
Copy link
Copy Markdown
Contributor

Hi @soheiokamoto and @rianvdm
Do we still want to proceed with this change?

@rianvdm
Copy link
Copy Markdown
Contributor

rianvdm commented May 7, 2026

I'm not sure about this one... @Sahidya do you want this?

@Sahidya
Copy link
Copy Markdown
Contributor

Sahidya commented May 7, 2026

I'm not sure about this one... @Sahidya do you want this?

@rianvdm I'll take this and work with @soheiokamoto to figure out the right changes.
A few things worth flagging:
The FirewallForAI fields just went live on April 15 (https://developers.cloudflare.com/changelog/post/2026-04-15-logpush-new-fields/) and this PR is now marking them as deprecated. I need to check with the Firewall team to find out which naming they actually want to keep before we publish anything.

I haven't looked into the email_security_post_delivery_events changes yet so I don't know if that dataset is actually ready to go.

Also, these two changes really shouldn't be in the same PR - the Firewall for AI rename and the new Email Security dataset are unrelated and have different stakeholders. Splitting them would let us merge each one when it's ready instead of blocking both.

@github-actions github-actions Bot removed the stale label May 8, 2026
@soheiokamoto
Copy link
Copy Markdown
Contributor Author

Closing this one, as there's a new one: #30808

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants