---
title: fastly service logging kafka create
summary: Create a Kafka logging endpoint on a Fastly service version
url: https://www.fastly.com/documentation/reference/cli/service/logging/kafka/create
---

Create a Kafka logging endpoint on a Fastly service version

## Flags

| Flag | Description | Required | Default |
|------|-------------|----------|----------|
| `--name` | The name of the Kafka logging object. Used as a primary key for API access | No | - |
| `--version` | 'latest', 'active', 'staged', or the number of a specific Fastly service version | Yes | - |
| `--autoclone` | If the selected service version is not editable, clone it and use the clone. | No | - |
| `--auth-method` | SASL authentication method. Valid values are: plain, scram-sha-256, scram-sha-512 | No | - |
| `--brokers` | A comma-separated list of IP addresses or hostnames of Kafka brokers | No | - |
| `--compression-codec` | The codec used for compression of your logs. One of: gzip, snappy, lz4 | No | - |
| `--format` | Apache style log formatting. Your log must produce valid JSON. Can be a string or a file path to a file containing formatting | No | - |
| `--format-version` | The version of the custom logging format used for the configured endpoint. Can be either 2 (the default, version 2 log format) or 1 (the version 1 log format). The logging call gets placed by default in vcl_log if format_version is set to 2 and in vcl_deliver if format_version is set to 1 | No | - |
| `--max-batch-size` | The maximum size of the log batch in bytes | No | - |
| `--parse-log-keyvals` | Parse key-value pairs within the log format | No | - |
| `--password` | SASL authentication password. Required if --auth-method is specified | No | - |
| `--placement` | Where in the generated VCL the logging call should be placed, overriding any format_version default. Can be none or waf_debug. This field is not required and has no default value | No | - |
| `--processing-region` | The region where logs will be processed before streaming to Kafka. One of 'none', 'eu', or 'us'. Defaults to 'none' for no specific region | No | - |
| `--required-acks` | The Number of acknowledgements a leader must receive before a write is considered successful. One of: 1 (default) One server needs to respond. 0	No servers need to respond. -1	Wait for all in-sync replicas to respond | No | - |
| `--response-condition` | The name of an existing condition in the configured endpoint, or leave blank to always execute | No | - |
| `--service-id` | Service ID (falls back to FASTLY_SERVICE_ID, then fastly.toml) | No | - |
| `--service-name` | The name of the service | No | - |
| `--tls-ca-cert` | A secure certificate to authenticate the server with. Must be in PEM format | No | - |
| `--tls-client-cert` | The client certificate used to make authenticated requests. Must be in PEM format | No | - |
| `--tls-client-key` | The client private key used to make authenticated requests. Must be in PEM format | No | - |
| `--tls-hostname` | Used during the TLS handshake to validate the certificate | No | - |
| `--topic` | The Kafka topic to send logs to | No | - |
| `--use-sasl` | Enable SASL authentication. Requires --auth-method, --username, and --password to be specified | No | - |
| `--use-tls` | Whether to use TLS for secure logging. Can be either true or false | No | - |
| `--username` | SASL authentication username. Required if --auth-method is specified | No | - |

## Global options

| Flag | Description | Required | Default |
|------|-------------|----------|----------|
| `--help` | Show context-sensitive help. | No | - |
| `--accept-defaults` | Accept default options for all interactive prompts apart from Yes/No confirmations | No | - |
| `--auto-yes` | Answer yes automatically to all Yes/No confirmations. This may suppress security warnings | No | - |
| `--debug-mode` | Print API request and response details (NOTE: can disrupt the normal CLI flow output formatting) | No | - |
| `--non-interactive` | Do not prompt for user input - suitable for CI processes. Equivalent to --accept-defaults and --auto-yes | No | - |
| `--quiet` | Silence all output except direct command output. This won't prevent interactive prompts (see: --accept-defaults, --auto-yes, --non-interactive) | No | - |
| `--token` | Fastly API token, or name of a stored auth token (use 'default' for the default token). Falls back to FASTLY_API_TOKEN env var | No | - |
| `--verbose` | Verbose logging | No | - |