---
title: Configure payload logging in the dashboard
description: Configure payload logging for managed rulesets in the dashboard.
image: https://developers.cloudflare.com/core-services-preview.png
---

> Documentation Index  
> Fetch the complete documentation index at: https://developers.cloudflare.com/waf/llms.txt  
> Use this file to discover all available pages before exploring further.

[Skip to content](#%5Ftop) 

### Tags

[ Logging ](https://developers.cloudflare.com/search/?tags=Logging) 

# Configure payload logging in the dashboard

Note

Only users with the [Super Administrator role](https://developers.cloudflare.com/fundamentals/manage-members/roles/) can configure payload logging and decrypt payloads in the Cloudflare dashboard. Other users can decrypt payloads if they have access to the logs and to the private key.

* [  New dashboard ](#tab-panel-8851)
* [ Old dashboard ](#tab-panel-8852)

1. In the Cloudflare dashboard, go to the **Security rules** page.  
[ Go to **Security rules** ](https://dash.cloudflare.com/?to=/:account/:zone/security/security-rules)
2. (Optional) Filter by **Managed rules**.
3. Search for the managed ruleset you want to configure. Look for a rule with an _Execute_ action.
4. Select the rule name (containing the name of the managed ruleset).
5. At the bottom of the page, select **Configure payload logging**.
6. After reading and understanding the implications of enabling payload logging, select one of the available options:  
   * **Generate key pair using your web browser**: Generates a key pair (a private and a public key) in your browser and configures payload logging with the generated public key.  
   * **Use my own public key**: Enter a public key [generated by the matched-data-cli command-line tool](https://developers.cloudflare.com/waf/managed-rules/payload-logging/command-line/generate-key-pair/).
7. Select **Next**.
8. If you generated a key pair in the browser, copy the displayed private key and **store it safely**. You will use this private key later to [view the decrypted payload content](https://developers.cloudflare.com/waf/managed-rules/payload-logging/view/).
9. Select **Done**, and then select **Save**.

1. Log in to the [Cloudflare dashboard ↗](https://dash.cloudflare.com), and select your account and domain.
2. Go to **Security** \> **WAF** \> **Managed rules** tab.  
![Example Managed Rules configuration in the Managed rules tab under Security > WAF](https://developers.cloudflare.com/_astro/waf-managed-rules-tab.CJ_mD1P3_Z1Q7yyY.webp)
3. To configure payload logging for a ruleset you had already deployed in the WAF, select the managed ruleset name.
4. At the bottom of the page, select **Configure payload logging**.
5. After reading and understanding the implications of enabling payload logging, select one of the available options:  
   * **Generate key pair using your web browser**: Generates a key pair (a private and a public key) in your browser and configures payload logging with the generated public key.  
   * **Use my own public key**: Enter a public key [generated by the matched-data-cli command-line tool](https://developers.cloudflare.com/waf/managed-rules/payload-logging/command-line/generate-key-pair/).
6. Select **Next**.
7. If you generated a key pair in the browser, copy the displayed private key and **store it safely**. You will use this private key later to [view the decrypted payload content](https://developers.cloudflare.com/waf/managed-rules/payload-logging/view/).
8. Select **Done**.
9. If you are deploying the managed ruleset where you configured payload logging, select **Deploy**. If you configured payload logging for a ruleset you had already deployed, select **Save**.

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/directory/","name":"Directory"}},{"@type":"ListItem","position":2,"item":{"@id":"/waf/","name":"WAF"}},{"@type":"ListItem","position":3,"item":{"@id":"/waf/managed-rules/","name":"Managed Rules"}},{"@type":"ListItem","position":4,"item":{"@id":"/waf/managed-rules/payload-logging/","name":"Log the payload of matched rules"}},{"@type":"ListItem","position":5,"item":{"@id":"/waf/managed-rules/payload-logging/configure/","name":"Configure payload logging in the dashboard"}}]}
```