You can now drain Vercel Firewall actions to external providers through Log Drains.
Requests denied by the Vercel Firewall will be drained with the firewall source. This includes the following events:
Requests blocked by a Custom Rule
Requests blocked by Challenge Mode
Requests blocked Managed Rules (e.g. OWASP CRS)
Requests blocked by an IP Rule
If a rule is set to log or to bypass, requests will not be sent to Log Drains. Firewall actions are also surfaced inside of Monitoring.
Learn more about the Log Drains.