---
schema_version: "1"
id: 3583d365226cb4f6014ec24d04ec3af9b0c287c44e67cce5da72b8dbe2c9132d
title: eCDN Logpush Destination Settings
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_ecdn_logpush_destination_settings.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_ecdn_logpush_destination_settings.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: c53f1e2aa46e4ceafeb39e9ad0f51e4b08e9eb636b3fc20b02c4bda8bf43a562
description: "Required and optional fields for each eCDN Logpush destination type on your B2C Commerce storefront: Amazon S3, Google Cloud Storage, Azure Blob Storage, Datadog, and Splunk."
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# eCDN Logpush Destination Settings

Required and optional fields for each eCDN Logpush destination type on your B2C Commerce storefront: Amazon S3, Google Cloud Storage, Azure Blob Storage, Datadog, and Splunk.

[Which Salesforce Commerce Product Do I Have?](https://help.salesforce.com/s/articleView?id=commerce.comm_what_product.htm&language=en_US)

Fill in these fields on the Destination Details step of the New Logpush Job wizard. For the full procedure, see [Create a Logpush Job](https://help.salesforce.com/s/articleView?id=cc.b2c_create_ecdn_logpush_job.htm&release=264.0.0&type=5 "Create a Logpush job to stream eCDN request, security, and Page Shield logs from your B2C Commerce storefront continuously to a customer-owned destination. The New Logpush Job wizard walks through destination setup and job configuration in two steps.").

## Amazon S3

Use Amazon S3 to push gzip-compressed log batches to an S3 bucket that you own.

Bucket (required)

Name of your S3 bucket.

Region (required)

AWS region of the bucket, for example, US East (N. Virginia), Europe (Frankfurt), or Asia Pacific (Tokyo).

Path (optional)

Prefix inside the bucket where log files land.

My policy requires AWS SSE-S3 AES256 Server Side Encryption (optional)

Select when your bucket policy requires SSE-S3 encryption on writes.

![New Logpush Job Amazon S3 Destination Details showing Bucket, Region dropdown, Path, SSE-S3 encryption checkbox, and AWS Resource Policy JSON section](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/cc/b2c_merchandiser_administrator/images/b2c_ecdn_configure_zone_logs_logpush_s3_config.png)

After you fill in Bucket and Region, the screen displays an AWS Resource Policy JSON snippet, and eCDN drops a one-time challenge file into your bucket to prove ownership. Both steps are part of the create procedure. See [Create a Logpush Job](https://help.salesforce.com/s/articleView?id=cc.b2c_create_ecdn_logpush_job.htm&release=264.0.0&type=5 "Create a Logpush job to stream eCDN request, security, and Page Shield logs from your B2C Commerce storefront continuously to a customer-owned destination. The New Logpush Job wizard walks through destination setup and job configuration in two steps.").

## Google Cloud Storage

Use Google Cloud Storage to push gzip-compressed log batches to a GCS bucket.

Bucket (required)

Name of your GCS bucket.

Path (optional)

Prefix inside the bucket.

After you save the destination details, grant the Cloudflare Logpush service account write permission on the bucket and complete the ownership challenge. See [Create a Logpush Job](https://help.salesforce.com/s/articleView?id=cc.b2c_create_ecdn_logpush_job.htm&release=264.0.0&type=5 "Create a Logpush job to stream eCDN request, security, and Page Shield logs from your B2C Commerce storefront continuously to a customer-owned destination. The New Logpush Job wizard walks through destination setup and job configuration in two steps.").

## Azure Blob Storage

Use Azure Blob Storage to push gzip-compressed log batches to a storage container.

SAS URL (required)

Container-level Shared Access Signature URL with write permission. The URL must include `sp=w` (or equivalent write rights) and must not expire before you intend to retire the job.

Path (optional)

Prefix inside the container.

## Datadog

Use Datadog to stream logs directly to a Datadog ingestion endpoint.

Datadog Site (required)

The Datadog site that owns your account, for example, `datadoghq.com`, `datadoghq.eu`, or `us3.datadoghq.com`.

API Key (required)

A Datadog API key with `logs_write` permission.

## Splunk

Use Splunk to stream logs to a Splunk HEC (HTTP Event Collector) endpoint.

HEC URL (required)

The HEC ingestion URL, for example, `https://<your-splunk>:8088/services/collector/raw`.

HEC Token (required)

The HEC token with permission to write to the destination index.

Channel ID (required)

A unique GUID identifying this channel. Click **Generate UUID** to create a new one.

Source Type (required)

The Splunk source type to assign to records, for example, `cloudflare:json`.

Insecure Skip Verify (optional)

Select to skip TLS certificate validation. Use only for non-production endpoints.