Delivery
Review events
Security logging is deliberately best-effort: writing an event should never be the reason a legitimate or blocked request fails outright.
How it works
- Every blocklist hit and WAF match is written to the security event log with enough context to investigate
- Events are reviewed from the dashboard's security view
- If event logging itself fails, the request's outcome is unaffected — the failure is swallowed rather than surfaced as an error
Good to know
- Use the event log to tell the difference between a one-off false positive and a pattern worth tightening the WAF or blocklist for

