Before you start
- You need a The Prompting Company API key (organization or service-account key) from Settings → API Keys.
- The zone must be on a Cloudflare Enterprise plan — Logpush for the HTTP requests dataset is Enterprise-only.
- Your DNS records must be proxied (orange cloud) — Logpush only captures traffic that flows through Cloudflare.
Configure the destination
header_* query parameters into request headers, so this sends your key as an Authorization: Bearer header with every push. Keep the value URL-encoded (%20 for the space).
Using the dashboard
- In the Cloudflare dashboard, open your zone and go to Analytics & Logs → Logpush.
- Click Create a Logpush job and select the HTTP requests dataset.
- Choose HTTP destination and paste the destination URL above.
- Select these fields:
ClientIP,ClientRequestHost,ClientRequestMethod,ClientRequestReferer,ClientRequestSource,ClientRequestURI,ClientRequestUserAgent,WorkerSubrequest,EdgeStartTimestamp,EdgeResponseContentType,EdgeResponseStatus. - Save and enable the job. Cloudflare validates the destination with a test message — this succeeds automatically.
Using the API
timestamp_format works (unixnano, unix, or rfc3339); rfc3339 is the easiest to debug.
What gets ingested
You don’t need to pre-filter traffic — send everything and The Prompting Company classifies AI crawlers and agents on ingestion. A few line types are skipped automatically so visits aren’t double-counted: Cloudflare’s destination-validation test message, Worker subrequests (WorkerSubrequest: true), non-eyeball requests (ClientRequestSource values like edgeWorkerFetch or purges), and lines without a ClientRequestHost. You can optionally add a Logpush filter to reduce volume, but it isn’t required for correctness.
Responses
Delivery is at-least-once: failed batches are re-pushed in full, and occasional duplicates are expected and tolerated by the traffic metrics.