Skip to content

[Logs] Update Logpush dataset field definitions (2026-05-19)#30910

Open
soheiokamoto wants to merge 1 commit into
productionfrom
sync/log-fields-2026-05-19
Open

[Logs] Update Logpush dataset field definitions (2026-05-19)#30910
soheiokamoto wants to merge 1 commit into
productionfrom
sync/log-fields-2026-05-19

Conversation

@soheiokamoto
Copy link
Copy Markdown
Contributor

Summary

Automated sync of Logpush dataset field definitions from data/entities.

Updated fields in existing datasets

  • DEX Device State Events (added): DeviceRegistrationProfileID.
  • HTTP requests (added): MatchedRules.

Files changed

  • src/content/docs/logs/logpush/logpush-job/datasets/{account,zone}/ — dataset pages
  • src/content/changelog/logs/2026-05-19-log-fields-updated.mdx — changelog

Documentation checklist

  • Changelog entry added
  • Content generated by code generator (DO NOT EDIT manually)

@soheiokamoto
Copy link
Copy Markdown
Contributor Author

/bonk please review this automated sync of Logpush dataset field definitions.

Focus on the following:

  1. Changelog quality — is the entry clear, accurate, and useful to end users?

  2. Field description quality — are the descriptions accurate, clear, and complete?

  3. Manual edits at risk of being overwritten — are there any field descriptions that appear
    to have been manually edited directly in cloudflare-docs (e.g. contain context or guidance
    not present in the machine-generated description format)? If so, flag them so the author can
    preserve those edits in the internal source YAML.

@github-actions
Copy link
Copy Markdown
Contributor

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern Owners
/src/content/changelog/ @cloudflare/pm-changelogs, @cloudflare/product-owners
/src/content/docs/logs/ @soheiokamoto, @angelampcosta, @rianvdm, @dcpena, @cloudflare/product-owners

Copy link
Copy Markdown
Contributor

@ask-bonk ask-bonk Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues need attention before merge.

MEDIUMsrc/content/docs/logs/logpush/logpush-job/datasets/zone/http_requests.md line 460: The abbreviation FL in the MatchedRules description is undefined. Per the style guide, acronyms must be spelled out on first use. Please update the internal source YAML.

MEDIUMsrc/content/docs/logs/logpush/logpush-job/datasets/zone/http_requests.md line 484: "Read more [here]" violates the style guide rule against non-descriptive link text. Suggestion provided inline.

LOW — The PR body and changelog list only two added fields, but the diff also includes description updates in mnm_flow_logs.md, firewall_events.md, and http_requests.md. Consider expanding the summary so reviewers know the full scope.


Type: `array[object]`

Array of matched FL product rules grouped by product. Each object contains: <em>product</em> (string, e.g. snippets, transform, redirects), <em>rulesetId</em> (string), <em>rulesetVersion</em> (int), and <em>rules</em> (array of objects, each with <em>id</em> (string) and optional <em>metadata</em> (object with string key-value pairs)).
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Undefined acronym. The style guide requires spelling out abbreviations on first use. Please update the internal source YAML to clarify what FL means, or remove the abbreviation.

Type: `int`

Number of bytes returned by the origin server.
Number of bytes returned by the origin server. Consider using CacheResponseBytes and filtering out OriginResponseStatus with values 0 and 304, which indicate a revalidated response. Read more [here](/logs/faq/common-calculations/#how-can-i-calculate-bytes-served-by-the-origin-from-cloudflare-logs).
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fix link text per style guide (never use "here", "read more", etc.):

Suggested change
Number of bytes returned by the origin server. Consider using CacheResponseBytes and filtering out OriginResponseStatus with values 0 and 304, which indicate a revalidated response. Read more [here](/logs/faq/common-calculations/#how-can-i-calculate-bytes-served-by-the-origin-from-cloudflare-logs).
Number of bytes returned by the origin server. Consider using CacheResponseBytes and filtering out OriginResponseStatus with values 0 and 304, which indicate a revalidated response. For more information, refer to [Calculating bytes served by the origin](/logs/faq/common-calculations/#how-can-i-calculate-bytes-served-by-the-origin-from-cloudflare-logs).

@ask-bonk
Copy link
Copy Markdown
Contributor

ask-bonk Bot commented May 19, 2026

Done. I posted a review on PR #30910.

What the PR changes

  • Adds DeviceRegistrationProfileID to the DEX Device State Events dataset
  • Adds MatchedRules to the HTTP requests dataset
  • Updates 4 existing field descriptions in Magic Network Monitoring Flow Logs (DeviceID, FlowTimestamp, RuleIDs, Timestamp)
  • Adds a contextual intro paragraph to the Zero Trust Network Session Logs dataset page
  • Marks 4 FirewallForAI* fields as deprecated in the Firewall Events dataset headings
  • Enhances the OriginResponseBytes description in HTTP requests with guidance on calculating origin-served bytes
  • Adds a changelog entry for the above changes

Labels
The PR already has appropriate labels (product:logs, size/s, product:changelog). No additional labels needed.

Issues flagged

  • MEDIUM: MatchedRules description uses the undefined abbreviation "FL" — violates the style guide's acronym rule. The internal source YAML should be updated to spell it out.
  • MEDIUM: OriginResponseBytes description uses "Read more [here]" as link text — violates the style guide's link-text rule. I posted an inline suggestion with descriptive link text.
  • LOW: The PR body and changelog underreport the scope — they list only 2 added fields, but the diff includes description updates across 3 additional files (mnm_flow_logs.md, firewall_events.md, http_requests.md). Consider expanding the summary.

github run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants