Gateway HTTP
The descriptions below detail the fields available for gateway_http.
AccountID
Section titled “AccountID”Type: string
Cloudflare account tag.
Action
Section titled “Action”Type: string
Action performed by gateway on the HTTP request.
ApplicationIDs
Section titled “ApplicationIDs”Type: array[int]
IDs of the applications that matched the HTTP request parameters.
ApplicationNames
Section titled “ApplicationNames”Type: array[string]
Names of the applications that matched the HTTP request parameters.
BlockedFileHash
Section titled “BlockedFileHash”Type: string
Hash of the file blocked in the response, if any.
BlockedFileName
Section titled “BlockedFileName”Type: string
File name blocked in the request, if any.
BlockedFileReason
Section titled “BlockedFileReason”Type: string
Reason file was blocked in the response, if any.
BlockedFileSize
Section titled “BlockedFileSize”Type: int
File size(bytes) blocked in the response, if any.
BlockedFileType
Section titled “BlockedFileType”Type: string
File type blocked in the response eg. exe, bin, if any.
CategoryIDs
Section titled “CategoryIDs”Type: array[int]
IDs of the categories that matched the HTTP request parameters.
CategoryNames
Section titled “CategoryNames”Type: array[string]
Names of the categories that matched the HTTP request parameters.
Datetime
Section titled “Datetime”Type: int or string
The date and time the corresponding HTTP request was made.
DestinationIP
Section titled “DestinationIP”Type: string
Destination ip of the request.
DestinationIPContinentCode
Section titled “DestinationIPContinentCode”Type: string
Continent code of the destination IP of the HTTP request (for example, 'NA').
DestinationIPCountryCode
Section titled “DestinationIPCountryCode”Type: string
Country code of the destination IP of the HTTP request (for example, 'US').
DestinationPort
Section titled “DestinationPort”Type: int
Destination port of the request.
DeviceID
Section titled “DeviceID”Type: string
UUID of the device where the HTTP request originated from.
DeviceName
Section titled “DeviceName”Type: string
The name of the device where the HTTP request originated from (for example, 'Laptop MB810').
DownloadMatchedDlpProfileEntries
Section titled “DownloadMatchedDlpProfileEntries”Type: array[string]
List of matched DLP entries in the HTTP request.
DownloadMatchedDlpProfiles
Section titled “DownloadMatchedDlpProfiles”Type: array[string]
List of matched DLP profiles in the HTTP request.
DownloadedFileNames
Section titled “DownloadedFileNames”Type: array[string]
List of files downloaded in the HTTP request.
Type: string
Email used to authenticate the client.
FileInfo
Section titled “FileInfo”Type: object
Information about files detected within the HTTP request.
ForensicCopyStatus
Section titled “ForensicCopyStatus”Type: string
Status of any associated forensic copies that may have been captured during the request.
HTTPHost
Section titled “HTTPHost”Type: string
Content of the host header in the HTTP request.
HTTPMethod
Section titled “HTTPMethod”Type: string
HTTP request method.
HTTPStatusCode
Section titled “HTTPStatusCode”Type: int
HTTP status code gateway returned to the user. Zero if nothing was returned (for example, client disconnected).
HTTPVersion
Section titled “HTTPVersion”Type: string
Version name for the HTTP request.
IsIsolated
Section titled “IsIsolated”Type: bool
If the requested was isolated with Cloudflare Browser Isolation or not.
PolicyID
Section titled “PolicyID”Type: string
The gateway policy UUID applied to the request, if any.
PolicyName
Section titled “PolicyName”Type: string
The name of the gateway policy applied to the request, if any.
PrivateAppAUD
Section titled “PrivateAppAUD”Type: string
The private app AUD, if any.
ProxyEndpoint
Section titled “ProxyEndpoint”Type: ``
Quarantined
Section titled “Quarantined”Type: bool
If the request content was quarantined.
RedirectTargetURI
Section titled “RedirectTargetURI”Type: string
Custom URI to which the user was redirected, if any.
Referer
Section titled “Referer”Type: string
Contents of the referer header in the HTTP request.
RegistrationID
Section titled “RegistrationID”Type: string
The UUID of the device registration from which the HTTP request originated.
RequestID
Section titled “RequestID”Type: string
Cloudflare request ID. This might be empty on bypass action.
SessionID
Section titled “SessionID”Type: string
Network session ID.
SourceIP
Section titled “SourceIP”Type: string
Source ip of the request.
SourceIPContinentCode
Section titled “SourceIPContinentCode”Type: string
Continent code of the source IP of the request (for example, 'NA').
SourceIPCountryCode
Section titled “SourceIPCountryCode”Type: string
Country code of the source IP of the request (for example, 'US').
SourceInternalIP
Section titled “SourceInternalIP”Type: string
Local LAN IP of the device. Only available when connected via a GRE/IPsec tunnel on-ramp.
SourcePort
Section titled “SourcePort”Type: int
Source port of the request.
Type: string
HTTP request URL.
UntrustedCertificateAction
Section titled “UntrustedCertificateAction”Type: string
Action taken when an untrusted origin certificate error occurs (for example, expired certificate, mismatched common name, invalid certificate chain, signed by non-public CA). One of none | block | error | passThrough.
UploadMatchedDlpProfileEntries
Section titled “UploadMatchedDlpProfileEntries”Type: array[string]
List of matched DLP entries in the HTTP request.
UploadMatchedDlpProfiles
Section titled “UploadMatchedDlpProfiles”Type: array[string]
List of matched DLP profiles in the HTTP request.
UploadedFileNames
Section titled “UploadedFileNames”Type: array[string]
List of files uploaded in the HTTP request.
UserAgent
Section titled “UserAgent”Type: string
Contents of the user agent header in the HTTP request.
UserID
Section titled “UserID”Type: string
User identity where the HTTP request originated from.
VirtualNetworkID
Section titled “VirtualNetworkID”Type: string
The identifier of the virtual network the device was connected to, if any.
VirtualNetworkName
Section titled “VirtualNetworkName”Type: string
The name of the virtual network the device was connected to, if any.
Was this helpful?
- Resources
- API
- New to Cloudflare?
- Products
- Sponsorships
- Open Source
- Support
- Help Center
- System Status
- Compliance
- GDPR
- Company
- cloudflare.com
- Our team
- Careers
- 2025 Cloudflare, Inc.
- Privacy Policy
- Terms of Use
- Report Security Issues
- Trademark