Cloudflare Workers · Runtime APIs · all subjects

analytics & observability

8 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

ctx.tracing: access to custom spans API

ctx.tracing provides access to the custom spans API for creating user-defined trace spans. It is the same object available via import { tracing } from "cloudflare:workers". Tracing must be enabled on the Worker for spans to be recorded. Use ctx.tracing.enterSpan(spanName, async (span) => { ... }) to create named spans and call span.setAttribute(key, value) to add attributes.

Example: ctx.tracing.enterSpan() for custom trace spans

The following example demonstrates creating a custom trace span: export default { async fetch(request, env, ctx) { return ctx.tracing.enterSpan("handleRequest", async (span) => { span.setAttribute("url.path", new URL(request.url).pathname); const data = await env.MY_KV.get("key"); return new Response(data); }); }, };

Cloudflare Access logs support Customer Metadata Boundary (CMB)

Cloudflare Access logs now support the Customer Metadata Boundary (CMB). If CMB is configured for an account, all Access logging will respect that configuration.

EU CMB customers must use Logpush for Access logs

For EU CMB customers, logs will not be stored by Access and will appear as empty in the dashboard. EU CMB customers should utilize Logpush to retain their Access logging if desired.

Data Security Analytics dashboard in Zero Trust

Zero Trust now includes Data security analytics providing visibility into organization sensitive data. The dashboard is accessed by logging into Cloudflare One at https://one.dash.cloudflare.com/ and navigating to Insights in the sidebar.

Sensitive Data Movement Over Time feature

The Data Security Analytics dashboard includes a feature called Sensitive Data Movement Over Time that shows patterns and trends in how sensitive data moves across the environment, helping understand data flow and identify common paths.

Sensitive Data at Rest in SaaS & Cloud feature

The Data Security Analytics dashboard includes a feature that provides an inventory view of sensitive data stored within corporate SaaS applications like Google Drive and Microsoft 365, as well as cloud accounts such as AWS S3.

DLP Policy Activity feature

The Data Security Analytics dashboard includes a DLP Policy Activity feature that shows which Data Loss Prevention policies are being triggered most often and identifies which specific users are responsible for triggering DLP policies.

Give your agent this brain