Use Logpush for Email Security user actions
You can now send user action logs for Email Security to an endpoint of your choice with Cloudflare Logpush.
Filter logs matching specific criteria you have set or select from multiple fields you want to send. For all users, we will log the date and time, user ID, IP address, details about the message they accessed, and what actions they took.
When creating a new Logpush, remember to select Audit logs as the dataset and filter by:
- Field:
"ResourceType"
- Operator:
"starts with"
- Value:
"email_security"
.

Learn more here on how to set this up on our docs.
This feature is available across all Email Security packages:
- Enterprise
- Enterprise + PhishGuard
Was this helpful?
- Resources
- API
- New to Cloudflare?
- Products
- Sponsorships
- Open Source
- Support
- Help Center
- System Status
- Compliance
- GDPR
- Company
- cloudflare.com
- Our team
- Careers
- © 2025 Cloudflare, Inc.
- Privacy Policy
- Terms of Use
- Report Security Issues
- Trademark