[ Web Proxy ]

Viewing: https://developers.cloudflare.com/waf/managed-rules/payload-logging/view/

View the payload content in the dashboard Cloudflare Web Application Firewall (WAF) docsSkip to content

[]DocsDirectory API SDKs Changelog

SearchCtrlK

WAF

Overview
Get started
Concepts
Traffic detections
- Overview
- Attack score
- Leaked credentials
  Overview
  Get started
  Common API calls
  Terraform examples
  Example mitigation rules
- Malicious uploads
  Overview
  Get started
  Example rules
  Common API calls
  Terraform examples
- AI Security for Apps
  Overview
  Get started
  PII detection
  Unsafe and custom topic detection
  Prompt injection detection
  Token counting
  Example mitigation rules
  Log mode vs production mode
  Available fields
- Bot score
- Threat intelligence
  Overview
  Get started
  Example rules
  Available fields
- Application Profiles
  Overview
  Get started
  Schema Profiles
  Analyze profile detections
  Enforce with Custom Rules
  Fields
Custom rules
Rate limiting rules
Managed rules
- Overview
- Deploy in the dashboard
- Deploy via API
- Deploy using Terraform
- Troubleshooting
- Create exceptions
  Overview
  Add an exception in the dashboard
  Add an exception via API
- Log the payload of matched rules
  Overview
  Configure in the dashboard
  View the payload content in the dashboard
  Configure via API
  Store decrypted matched payloads in logs
  Command-line operations
  Overview
  Generate a key pair
  Decrypt the payload content
- Check for exposed credentialsDeprecated
  Overview
  How it works
  Configure via API
  Configure using Terraform
  Test your configuration
  Monitor exposed credentials events
  Upgrade to leaked credentials detection
- Rulesets reference
  Cloudflare Managed Ruleset
  Cloudflare OWASP Core Ruleset
  Overview
  Concepts
  Evaluation example
  Configure in the dashboard
  Configure via API
  Configure in Terraform
  Cloudflare Exposed Credentials Check Managed RulesetDeprecated
  Cloudflare Sensitive Data Detection
Additional tools
- Lists
  Overview
  Custom lists
  Bulk Redirect Lists
  Managed Lists
  Create in the dashboard
  Use lists in expressions
  Lists API
  Overview
  JSON object
  Endpoints
- IP Access rules
  Overview
  Create a rule
  Parameters
  Actions
- Scrape Shield
  Overview
  Email Address Obfuscation
  Hotlink Protection
- User Agent Blocking
- Zone Lockdown
- Browser Integrity Check
- Enable security.txt
- Privacy Pass
- Replace insecure JS libraries
- Security Level
- Validation checks
Account-level configuration
- Overview
- Custom rulesets
  Overview
  Use the dashboard
  Use the API
  Use Terraform
- Rate limiting rulesets
  Overview
  Create in the dashboard
  Create via API
  Create using Terraform
- Managed rulesets
  Overview
  Deploy in the dashboard
  Deploy via API
  Deploy using Terraform
  Create exceptions
Analytics
- Security Analytics
- Security Events
Security features interoperability
Reference
- Alerts
- Phases
- Legacy features
  WAF managed rules (previous version)
  Overview
  Troubleshooting
  WAF managed rules upgrade
  Rate Limiting (previous version)
  Overview
  Troubleshooting
  Rate limiting upgrade
  Firewall rules
  Firewall rules upgrade
Troubleshooting
Glossary
Changelog
Agent resources

Home
/WAF
/…
Managed rules
/Log the payload of matched rules
/View the payload content in the dashboard

View the payload content in the dashboard

Last updated Aug 3, 2026Copy as MarkdownView as MarkdownAgent setup

View the content of the matched rule payload in the dashboard by entering your private key.

Open Security Events:
1. In the Cloudflare dashboard, go to the Analytics page.
  Go to Analytics ↗
2. Select the Events tab.
Under Sampled logs, expand the details of an event triggered by a rule whose managed ruleset has payload logging enabled.
Under Matched service, select Decrypt payload match.
[Example of a security event with available payload match data (still encrypted)]
Enter your private key in the pop-up window and select Decrypt.

Note
The private key is not sent to a Cloudflare server. The decryption occurs entirely in the browser.

If the private key you entered decrypts the encrypted payload successfully, the dashboard will show the name of the fields that matched and the matched string in clear text, along with some text appearing before and after the match.

[Viewing the decrypted payload match data after entering your private key in the dashboard]

PreviousConfigure in the dashboard NextConfigure via API

Was this helpful?

YesNo

Edit page Report issue

View the payload content in the dashboard

On this page