# Cloudflare: Major incident: Delayed audit log delivery for WARP and Zero Trust services

> Cloudflare reported a minor degradation affecting WARP API and Zero Trust audit log delivery starting 2026-10-22 17:32 UTC; some customers’ logs were delayed or not delivered, with dependent services potentially affected. A shared internal data pipeline capacity problem in PDX was identified; mitiga

Canonical: https://rewindex.com/change/ie408d14a76d276
Last updated: 2026-10-22T17:33:04Z

**Summary:** Cloudflare reported a minor degradation affecting WARP API and Zero Trust audit log delivery starting 2026-10-22 17:32 UTC; some customers’ logs were delayed or not delivered, with dependent services potentially affected. A shared internal data pipeline capacity problem in PDX was identified; mitigations partially restored it. The incident remained open when archived, 0 min at the last update. _(machine-written, sol)_
- Kind: Major incident · Label: degradation (model (Jev))
- Changed: 2026-10-22 17:32 UTC · Detected: 2026-10-22 17:33 UTC
- [Source: https://www.cloudflarestatus.com/incidents/qwrtvb4jfvk7](https://www.cloudflarestatus.com/incidents/qwrtvb4jfvk7)
- [Company: Cloudflare](https://rewindex.com/company/cloudflare.md)
- Versions: before (none: first archived) → after incident\_version:82/qwrtvb4jfvk7@04692d9ba38a
- Change 1 of 5 for this incident

Incident page (full timeline): [Delayed audit log delivery for WARP and Zero Trust services](https://rewindex.com/company/cloudflare/incidents/qwrtvb4jfvk7.md)
## What changed

**1. Added: Title**

```diff
+ Delayed audit log delivery for WARP and Zero Trust services
```

**2. Added: Impact**

```diff
+ minor
```

**3. Added: Status**

```diff
+ investigating
```

**4. Added: Start time**

```diff
+ 2026-10-22 17:32 UTC
```

**5. Added: Affected components**

```diff
+ Audit Logs, Cloudflare Sites and Services - Audit Logs, Cloudflare Sites and Services - Zero Trust, Zero Trust
```

**6. Added: Update** (investigating) · 2026-10-22 17:32 UTC

```diff
+ We are investigating an issue affecting audit log delivery for WARP API. Audit logs for some customers may be delayed or not delivered, and some dependent services may also be affected. We have identified the cause as a capacity problem in a shared internal data pipeline in our PDX region. Mitigations are in place and the pipeline is partially recovered. We are continuing to monitor and work toward full recovery.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-22 17:32 UTC | Major incident: Delayed audit log delivery for WARP and Zero Trust services (this change) | degradation |
| 2026-10-22 17:43 UTC | [Incident silently edited: Delayed audit log delivery for WARP and Zero Trust services](https://rewindex.com/change/r2399af3be5bdcc.md) | minor edit |
| 2026-10-22 17:53 UTC | [Incident updated: Delayed audit log delivery for WARP and Zero Trust services](https://rewindex.com/change/r2feccaa37bc84d.md) | Normal progress |
| 2026-10-23 00:13 UTC | [Incident updated: Delayed audit log delivery for WARP and Zero Trust services](https://rewindex.com/change/rd65d21c508148e.md) | Normal progress |
| 2026-10-28 14:33 UTC | [Incident updated: Delayed audit log delivery for WARP and Zero Trust services](https://rewindex.com/change/ra426b71e8bd9f5.md) | Wording only |

Next: [change](https://rewindex.com/change/r2399af3be5bdcc.md) · All Cloudflare changes: [timeline](https://rewindex.com/company/cloudflare/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Major incident: Delayed audit log delivery for WARP and Zero Trust services on Cloudflare’s status page, changed 2026-10-22 17:32 UTC (change 1 of 5).

- Canonical URL: https://rewindex.com/change/ie408d14a76d276
- Citation: Cloudflare, “Major incident: Delayed audit log delivery for WARP and Zero Trust services” (2026-10-22 17:32 UTC). Archived by Rewindex: https://rewindex.com/change/ie408d14a76d276 (CC BY 4.0).
- Markdown link: `[Cloudflare: Major incident: Delayed audit log delivery for WARP and Zero Trust services (2026-10-22)](https://rewindex.com/change/ie408d14a76d276)`


---
Canonical: https://rewindex.com/change/ie408d14a76d276 · Markdown: https://rewindex.com/change/ie408d14a76d276.md · JSON: https://rewindex.com/api/v1/changes/ie408d14a76d276 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T17:15:49.418Z