- Level
- confirmed
- Worst impact
- Partial outage
- Components
- Zero Trust, Audit Logs
- Down Index
- 32of 100
What to do
Check whether you use Cloudflare Zero Trust, Audit Logs. Check your stack
Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.Confirm your retries, queues and scheduled jobs caught up after the 6h 38m it lasted.
Anything that failed between 2026-10-22 17:32 UTC and 2026-10-23 00:10 UTC may need a replay.Subscribe to Cloudflare's feed to hear about the next one first. RSS feed
https://down.guide/feed?provider=cloudflare works in Slack (/feed subscribe), Discord feed bots and any RSS reader.
Root cause
We have identified the cause as a capacity problem in a shared internal data pipeline in our PDX region.
Category: Capacity
Read the postmortemUpdates from Cloudflare 3
- investigating
We are investigating an issue affecting audit log delivery for WARP API. Audit logs for some customers may be delayed or not delivered, and some dependent services may also be affected. We have identified the cause as a capacity problem in a shared internal data pipeline in our PDX region. Mitigations are in place and the pipeline is partially recovered. We are continuing to monitor and work toward full recovery.
provider
- monitoring
A fix has been implemented and we are monitoring the results.
provider
- resolved
This incident has been resolved.
provider
Reports count in aggregate; nothing about you is shown.
Corrections
None so far.
Something wrong on this page? Report an error or send us a note. Every fix is listed here.
Questions about DWN-ec0412d102
Is Cloudflare still down?
No, this incident was resolved 2026-10-23 00:10 UTC. For Cloudflare's live state, see https://down.guide/cloudflare.
How long did it last?
6h 38m, from 2026-10-22 17:32 UTC to 2026-10-23 00:10 UTC, by the times Cloudflare posted.
What was affected?
Cloudflare named Zero Trust, Audit Logs.
What caused it?
Capacity. Cloudflare wrote: "We have identified the cause as a capacity problem in a shared internal data pipeline in our PDX region." The postmortem: https://www.cloudflarestatus.com/incidents/qwrtvb4jfvk7
Where does this come from?
Cloudflare's official status page, https://www.cloudflarestatus.com, quoted verbatim. down.guide's own probes, reports and social counts are labeled as ours.