Cloudflare: Delayed audit log delivery for WARP and Zero Trust services
Cloudflare reported a minor degradation affecting WARP API and Zero Trust audit log delivery starting 2026-10-22 17:32 UTC; some customers’ logs were delayed or not delivered, with dependent services potentially affected. A shared internal data pipeline capacity problem in PDX was identified; mitigations partially restored it. The incident remained open when archived, 0 min at the last update.
Machine-written from the archived incident (Sol). Check the timeline before relying on it.
Affected components: Audit LogsDashboard & API - Audit LogsZero TrustZero Trust - Zero Trust
Timeline of updates
- investigating
We are investigating an issue affecting audit log delivery for WARP API. Audit logs for some customers may be delayed or not delivered, and some dependent services may also be affected.
We have identified the cause as a capacity problem in a shared internal data pipeline in our PDX region. Mitigations are in place and the pipeline is partially recovered. We are continuing to monitor and work toward full recovery.
- monitoring
A fix has been implemented and we are monitoring the results.
- resolved
This incident has been resolved.
Changes Rewindex caught on this incident
- Major incident: Delayed audit log delivery for WARP and Zero Trust services
- Incident silently edited: Delayed audit log delivery for WARP and Zero Trust services
- Incident updated: Delayed audit log delivery for WARP and Zero Trust services
- Incident updated: Delayed audit log delivery for WARP and Zero Trust services
- Incident updated: Delayed audit log delivery for WARP and Zero Trust services
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
First version captured
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
81a77f2c1bb87985…Version 2 captured
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
e7b3fcfd9123811c…Version 3 captured
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
d6dc1ce0b9d6e94b…Version 4 captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
3074b6c422e4e666…Version 5 captured
In the 2026-10-28 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
3316465b1442a25b…
Impact, status and times are the vendor’s own, as last archived. View on www.cloudflarestatus.com (opens in new tab).
Cite this
Status incident (vendor impact label: major) posted by Cloudflare, started 2026-10-22 17:32 UTC, resolved after 6.6 h, 3 update(s); edited after publishing.
- Title
- Delayed audit log delivery for WARP and Zero Trust services
- Vendor
- Cloudflare
- Date
- URL
- https://rewindex.com/company/cloudflare/incidents/qwrtvb4jfvk7
Cloudflare profileRecent Cloudflare incidentsAll outages on October 22, 2026Cloudflare in October 2026MarkdownJSON