SIEM/Logging Integration

Stream Aptible activity events to your SIEM or logging provider

You can stream Activity events from your Aptible organization to a SIEM or logging provider for centralized monitoring, alerting, or other compliance needs.

Activity Log Viewer (coming soon!)

When setting up an integration, you’ll first want to ensure your user (or a dedicated user for this purpose) is added to the Activity Log Viewer Role.

Then, as that user, generate a long-lived token to use for this integration. This token can be valid for however long you choose, up to a year, and you’ll need to rotate the token in your integration’s configuration on that schedule. These integrations can handle interruption, so you won’t be permanently missing activity if the token lapses: as soon as you replace an expired token, the integration resumes from its last saved position.

Supported Providers

Get started by following the setup guide for your provider:

• Hosted Elasticsearch (Elastic Cloud) — via the Custom API integration (HTTPJSON input)
• Sumo Logic — via a self-hosted forwarding container

Don’t see your provider? Contact Aptible Support to discuss your integration needs.