Docs

Log Shipping Error Codes

Overview

When using the Logs API endpoint to export WAF log data, you may encounter error responses. This document lists the error codes, what they mean, and how to resolve them.

HTTP Error Responses

400 — Bad Request

The request was malformed or contained invalid parameters.

Error Message Cause Fix
Invalid date format. Use YYYY-MM-DD. The start_date or end_date parameter is not in the expected format Use YYYY-MM-DD format (e.g., 2025-03-15)
start_date must be before or equal to end_date The date range is inverted Swap the dates so start_date comes first
Date range cannot exceed 90 days The query spans more than 90 days Narrow your date range to 90 days or fewer. Make multiple requests for longer periods.
Invalid scroll_id The scroll_id parameter is expired, corrupted, or from a different query session Start a new query with /api/logs/query to get a fresh scroll_id

403 — Forbidden

Error Message Cause Fix
Missing or invalid api_key The API key is wrong, missing, or belongs to a deactivated account Verify your API key on your WAF dashboard settings page

404 — Not Found

Error Message Cause Fix
No WAF configured for this account The API key is valid but there is no WAF instance associated with the account Verify you are using the correct API key for the account that has a WAF

500 — Internal Server Error

An unexpected error occurred on our side. If you receive a 500 error:

  1. Wait a few minutes and retry the request
  2. If the error persists, contact support with the full request URL and response body

Scroll Session Expiration

The _scroll_id returned by /api/logs/query has a limited lifetime. If you wait too long between scroll requests, the session expires and you will receive a 400 Invalid scroll_id error. To resolve this, start a new query from /api/logs/query.

For best results, process scroll responses promptly and sequentially.

Empty Results

If your query returns zero hits (hits.total.value is 0), this means no blocked requests were recorded in the date range you specified. This is not an error — it means the WAF did not block any requests during that period.

Need Help?

If you are encountering errors not listed here or need help integrating with the Logs API: