Cloudflare alerting
You can use the Cloudflare data source with Grafana Alerting to create alert rules based on your Cloudflare data. This allows you to get notified when DNS query patterns change, response times increase, or other metrics exceed thresholds.
Before you begin
Ensure you have:
- Configured the Cloudflare data source
- Familiarity with Grafana Alerting
Supported query types for alerting
Alerting works best with time series queries that return numeric data. The following Cloudflare query types support alerting:
Note
Table-based queries like “DNS analytics report” and “List zones” are not suitable for alerting because they don’t return time series data.
Create an alert rule
To create an alert rule using the Cloudflare data source:
- Navigate to Alerting > Alert rules in the left menu.
- Click New alert rule.
- In the query section, select your Cloudflare data source.
- Configure a time series query (for example, DNS analytics by time).
- Define your alert condition using expressions (Reduce, Threshold, etc.).
- Configure labels, notifications, and other alert settings.
- Click Save rule.
For detailed instructions on creating alert rules, refer to Create Grafana-managed alert rules.
Alert examples
Example: Alert on high DNS query volume
To receive an alert when DNS query count exceeds a threshold:
- Create a new alert rule.
- Select the Cloudflare data source.
- Set Action to
zones-dns-analytics-report-bytime. - Select your zone from Zone ID.
- In Metrics, select
Query Count. - Add a Reduce expression to calculate the average or last value.
- Add a Threshold expression to trigger when the value exceeds your limit (for example, > 10000).
- Configure notification settings and save.
Example: Alert on slow DNS response times
To receive an alert when average DNS response time increases:
- Create a new alert rule.
- Select the Cloudflare data source.
- Set Action to
zones-dns-analytics-report-bytime. - Select your zone from Zone ID.
- In Metrics, select
Average response time. - Add a Reduce expression to calculate the average.
- Add a Threshold expression to trigger when response time exceeds your SLA (for example, > 100ms).
- Configure notification settings and save.
Example: Alert on DNS query drops
To receive an alert when DNS queries drop significantly (potential outage indicator):
- Create a new alert rule.
- Select the Cloudflare data source.
- Set Action to
zones-dns-analytics-report-bytime. - Select your zone from Zone ID.
- In Metrics, select
Query Count. - Add a Reduce expression to calculate the average.
- Add a Threshold expression to trigger when the value drops below a baseline (for example, < 100).
- Configure notification settings and save.



