Cloudflare integration – Netenrich

Table of Contents:

The article covers how to enable Cloudflare integration and add an instance to sync entities from Cloudflare to Resolution Intelligence Cloud.

Overview

Integrate with Cloudflare, a CMDB integration, helps you to sync entities such as DNS records and domains from Cloudflare to the Resolution Intelligence Cloud. For this integration, you will need to obtain an API key from the Cloudflare account. With this key, you can navigate to the Resolution Intelligence Cloud to complete the Cloudflare integration. While configuring a Cloudflare instance, use conditions to control the entities you prefer to sync to the Resolution Intelligence Cloud. Once the entities are synced, you can monitor them continuously for security threats.

Prerequisites

API key (a token generated from the Cloudflare account)

Enabling Cloudflare integration

Use this procedure to enable Cloudflare Integration to add an instance to onboard entities like DNS records and domains from Cloudflare.

1. Click Configurations to navigate to the Configurations options.

2. Select Integrations, under the Data Ingestion section to see all the data sources and monitoring tools that you want to integrate.

3. Select CMBD from the list to see only the CMDB sources available to integrate with the platform.

(or) Search for Cloudflare integration in the search box.

4. Click on the Cloudflare card to open. This takes you to the Cloudflare page.

5. Click Add and select Add New Integration to add a new integration to the platform. This enables Cloudflare Integration.

Adding a Cloudflare Instance

Use this procedure to add a Cloudflare instance from where you want to sync entities such as DNS records and domains.

1. Click Add Instance. This opens the Add Instance page.

2. Specify the Instance Details:

Field name	Field description
Name	The name of the Cloudflare instance.
API key	The API key generated in the Cloudflare account.

3. Under Specify Ingestion Criteria, construct the condition expression. Select a field and operator from the drop-down lists. For the value, select a value from the drop-down list or enter it manually, depending on the field type. The condition is used to determine the records to which the rule will apply.

A condition expression can consist of several phrases, joined by an AND (or) OR. For each phrase, select a field, operator, and value. Click the button to add an additional row. Use the parentheses and AND/OR options to join the phrases together to form a condition expression.

The conditions include the following attributes:

Alias Name
Created time
Updated time
Name

4. Under Schedule, choose the following to sync the incoming data from Cloudflare.

Timezone: Select the appropriate Timezone at which the sync should happen. (for example, (UTC+05:30) Asia/Kolkata)

Time: Select the appropriate date and time at which the sync should happen.

Repeat: From the drop-down, select the following

Monthly: Specify the number of months and the day. (for example, for every 6 months on the 30th day according to the Timezone you selected)
Weekly: Specify the day (for example, Every Thursday at 10:AM according to the Timezone you selected)
Daily: On every day at a specific time based on the time you have specified
5. Click Validate and Save to save the Cloudflare instance.

Viewing the existing instances

Use this procedure to view the Cloudflare instances added to this tenant.

1. Select Integrations, under the Data Ingestion section to see all the data sources and monitoring tools that you want to integrate. This opens the Integrations page where you can see all the enabled and available integrations.

2. Click the Cloudflare card in the Enabled Integrations section. This opens the page where you can see the existing instances.

3. Review this information:

Field name	Field description
Name	The name of the Cloudflare instance.
Organization ID	A unique ID of the organization whose assets are synced.
E-mail	The email address of the user who has created the Cloudflare instance.
Updated Time	The time at which the instance was last updated.
Schedule	The job schedule created for this instance.

You can do the following actions on this page, using the ellipses icon:

Syncing the Cloudflare instance

Use this procedure to sync the Cloudflare entities to the Resolution Intelligence Cloud instantly.

To sync the Cloudflare entities:

Select Integrations, under the Data Ingestion section to see all the data sources and monitoring tools that you want to integrate. This opens the Integrations page where you can see all the enabled and available integrations.
Click the Cloudflare card in the Enabled Integrations section. This opens the page where you can see the existing instances.
Click the ellipses icon corresponding to the Cloudflare instance you want to sync and select Sync now.
This syncs the latest entities to the Resolution Intelligence Cloud.

Viewing the job history

Use this procedure to track the job history. This gives you details, such as when the job was performed and what is the outcome of the job.

To sync the Cloudflare entities:

Select Integrations, under the Data Ingestion section. This opens the Integrations page where you can see all the enabled and available integrations.
Click the Cloudflare card in the Enabled Integrations section. This displays the existing instances.
Click the ellipses icon corresponding to the Cloudflare instance whose job history you want to view and select Job History. This displays the Job History tab.
View the following job details:

Field name	Field description
Job ID	A unique ID generated for every run.
Start time	The time when the job was started.
End time	The time when the job ended.
Execution time	The time taken to run a job.
Status	The status of the job run. Possible values: Success – Indicates that the job run was successful. Failed – Indicates the job has failed to execute successfully. Running – Indicates the job run is in progress.

Note: If the job is failed, you can use the Retry button to re-run the job

Deleting an Instance

Use this procedure to delete a Cloudflare Instance.

Select Integrations, under the Data Ingestion section. This opens the Integrations page where you can see all the enabled and available integrations.
Click the Cloudflare card in the Enabled Integrations section. This displays the existing instances.
Click the ellipses icon corresponding to the Cloudflare instance you want to delete and select Delete Instance. A pop-up window appears.
Click Yes to delete.

Deleting a schedule

Use this procedure to delete a schedule associated with the Cloudflare instance. You cannot view the Delete schedule option when no schedules are set for this instance.

Select Integrations, under the Data Ingestion section. This opens the Integrations page where you can see all the enabled and available integrations.
Click the Cloudflare card in the Enabled Integrations section. This displays the existing instances.
Click the ellipses icon corresponding to the Cloudflare instance and select Delete Schedule to delete the scheduled job for this instance.

You can now view the scheduler being removed from this instance.

Modifying the Instance details

Use this procedure to modify the instance details.

Select Integrations, under the Data Ingestion section. This opens the Integrations page where you can see all the enabled and available integrations.
Click the Cloudflare card in the Enabled Integrations section. This displays the existing instances.
Click the ellipses icon corresponding to the Cloudflare instance you want to modify and select Edit Instance. This takes you to the Edit Instance page.
Change the Instance details and Click Validate and Save the save the updated changes.

Deactivating Cloudflare Integration

Use this procedure to deactivate the Cloudflare Integration for this organization or tenant.

Select Integrations, under the Data Ingestion section. This opens the Integrations page where you can see all the enabled and available integrations.
Click the Cloudflare card in the Enabled Integrations section.
Click the ellipses icon and select Deactivate to remove the existing entities from the platform. However, reactivating will retrieve all the entities.