EdgeData
EdgeData log explorer with search bar, timeline, and event stream.
Cloudflare operations control center

Deep search, dashboards, and alert workflows for Cloudflare operators.

EdgeData gives teams already running on Cloudflare a tighter path from signal to root cause without stitching together a pile of tools during an incident.

See product screens Share feedback

Single-tenant deployment on Cloudflare Pages, Workers, D1, R2, and Analytics Engine.

Cloudflare-native runtime and storage Object-backed event and token indexes PPL as the investigation language Alert-to-investigation workflow design Predictable guardrails on expensive queries
Platform

Built for on-call, platform, and security-adjacent teams that need incident clarity fast.

EdgeData keeps the operational path tight: collect edge and app signals, summarize them clearly, alert with context, and pivot into the exact event trail that explains what changed.

Deep search that stays explainable

Move between token search, phrase scans, filters, and pivots without losing the investigation trail.

PPL as the search language of choice

Use a readable pipeline language for investigations so searches, filters, stats, and pivots stay transparent to operators.

Dashboards that drive action

Expose error spikes, latency regressions, hotspots, and service fanout in a view built for operators.

Alert workflows with context

Keep thresholds, schedules, runbook metadata, and deep-link conventions attached to each operational alert.

Single-tenant by design

Deploy into your own Cloudflare account so data control, security boundaries, and spend stay local.

EdgeData uses PPL because incident response benefits from a query language that is expressive enough for real investigations but still readable when alerts, dashboards, and saved searches need to be shared across a team.

Features

Operational capabilities built for fast investigation.

EdgeData brings together operational dashboards, PPL-powered log search, alert definition workflows, rich event inspection, and workspace administration as one connected investigation surface.

EdgeData dashboards view with service volume, error, and hotspot panels.
Dashboards Track event volume, error rates, slow requests, host hotspots, and service mix in one command-center view.
EdgeData log explorer with activity timeline, filters, and event results.
Log explorer Search recent activity with PPL, structured filters, facets, timelines, and keyboard-friendly event review.
EdgeData alert definitions view with templates, thresholds, and notification channels.
Alert workflows Define thresholds, owners, runbooks, windows, and notification routes without leaving the operational context.
EdgeData event detail panel with core fields and structured attributes.
Event detail Inspect trace IDs, status, host, user, and raw attributes to understand the exact incident payload.
EdgeData administration screen with access, invites, operations, and audit log sections.
Administration Manage access, invites, operational controls, and audit history from a single workspace control plane.
Deployment Model

Cloudflare-native by design, from ingest to investigation.

EdgeData is built around the Cloudflare stack so teams can ingest logs, search with PPL, define alerts, and investigate incidents using primitives that already fit how their edge and application infrastructure runs.

Ingest and search

Workers handle ingestion and query execution while object-backed indexes keep deep search durable and explainable.

Stateful operations

D1 stores saved searches, alerts, preferences, and operational state so teams can move from detection to action quickly.

Analytics and retention

R2 and Analytics Engine support recent visibility, raw retention, and drilldown paths without turning EdgeData into a generic analytics project.